{"report_id":"2e346b0f-81ce-45af-a8ed-f087bb5f7fc3","version":0,"status":"done","tags":[],"date":"2026-08-10T18:38:31Z","url":{"schema":"http","addr":"oroviento.pro/","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":0,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"oroviento.pro/","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"title":"1 new message","dom":{"size":114267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (29874)","md5":"60a5204bb1beec6ba4e0938474db9ee8","sha1":"536f48e967cfb14f09bcc57e80889eae8014aaa1","sha256":"bfdab759dafd9066b94969b1cdfb0d7a5987576080d125afda0a3b963e27984c","sha512":"ef77610aa31e138b3e1bdb22f4e669af5fc902ab9cbdb0ebcb4dd8795d4e0930d8752fc1b801243329073f11e62243456652432ec2d5af284876c7a518f40302","ssdeep":"1536:FMCMPMCMfMCM8MCMGMCM/MCMtMCMAsVMJI4tzeMnJPOO1J3w304tvsrqM9uPpDKM:HJ3Ky7RbG","tlshash":"bfb3c852a0c66877402343d291aa7f2c60feba35cb1208b6f3bf126d57cafe53917165","dom_hash":"domhash54d1b62f90f06af3249c23d3664e0e1c","first_seen":"2026-08-10T18:38:37.635019Z","last_seen":"2026-08-10T18:38:37.635019Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oroviento.pro/","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":0,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T18:38:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":3,"received_data":110763,"sent_data":1738,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vsb1.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":985921,"first_seen":"2020-04-03T18:54:29Z","last_seen":"2026-08-08T21:26:15.672729Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oroviento.pro","ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-10T18:16:18.460733Z","last_seen":"2026-08-10T18:16:18.460733Z","alert_count":58,"request_count":58,"received_data":4606998,"sent_data":32138,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-08-03T20:04:57.874986Z","alert_count":0,"request_count":25,"received_data":1354983,"sent_data":12322,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-08-04T00:35:22.372433Z","alert_count":0,"request_count":3,"received_data":6358,"sent_data":1680,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2026-08-04T02:10:21.337796Z","alert_count":0,"request_count":25,"received_data":90592,"sent_data":14654,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.cryptohopper.com","ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-09","domain_rank":0,"first_seen":"2021-05-14T04:16:20Z","last_seen":"2026-08-09T07:22:02.630975Z","alert_count":0,"request_count":3,"received_data":56383,"sent_data":1890,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ws.coincap.io","ip":{"addr":"104.20.46.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-17","domain_rank":3054346,"first_seen":"2018-10-16T14:52:10Z","last_seen":"2026-08-07T03:09:10.231847Z","alert_count":0,"request_count":1,"received_data":242,"sent_data":843,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-09T23:02:50.69879Z","alert_count":0,"request_count":2,"received_data":305250,"sent_data":971,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":2,"received_data":16800,"sent_data":1163,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.cryptohopper.com","ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-09","domain_rank":1263380,"first_seen":"2017-12-20T12:36:53Z","last_seen":"2026-08-10T18:07:33.565028Z","alert_count":0,"request_count":2,"received_data":55667,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oroviento.pro/assets/js/swiper-bundle.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-08-10T18:38:37.696837Z","times_seen":14967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/js/script","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8499c3b86de4df25542c2f9f78d8a79c","sha1":"3942a2674cb09241e3598eb3d6403e3d2c2b09ff","sha256":"d67aaeb25ce9e34bdc18b2d3ba099086b1c3e5f3cda04edebcb14f826e5a78e4","sha512":"2a7103879757369f94970215e8e1d51255a567118cdefa1147396499dfe093175ddd63b579e790d1df3d4c2dd4ff4043ebeccd917124c6635654adf928d6daba","ssdeep":"768:DPFqnpKxIFoN7jGS9yp8TaA/ME0pwKfID8gXATtIpEmR7/7Scrni6NFDjdmyXRs0:RqnpKxIFoN7jGoaAUEyTOPncyXRsYxuK","tlshash":"54c20919f640b4bb027762aab43f5316326779e676020450a06dd9f17efcd882337f6a","size":26729,"data":"","first_seen":"2023-03-08T06:37:48Z","last_seen":"2026-08-10T18:38:37.669341Z","times_seen":684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/custom.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8adda41789a33dcdcecba4f0f498b786","sha1":"584f54be52b3f1435c4596de8fcfffe150285da6","sha256":"2f2f54be4c4ad3f6b5d16bcb89623e367ce03624ebf26ceb82476567633d51a9","sha512":"d838ee08db5de68a1e839d697ffe733014d40a49e6921719888eade3a05848f6583fd3dd1955cb0c3015d9fa05cdaaa3638168c296c4e7e6f83fd551201255aa","ssdeep":"192:cYZMn4UyWe1yDMAtS2NjmM0dicieym8GHm+dgfqzfsweGQQrvZm:cYZMnrvK+MAj90dicizMgC5rQQrRm","tlshash":"4932631498751032007b717bdd9f5380b2b36047a9acbe31789e85484fa8b7e52fa7f9","size":11212,"data":"","first_seen":"2025-02-26T15:15:16.438731Z","last_seen":"2026-08-10T18:38:37.698214Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-10T20:36:23.309192Z","times_seen":93232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","size":10918,"data":"","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-10T20:36:23.276278Z","times_seen":14128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41ab8f218022051b946ab0c328bcb874","sha1":"23c1db81fbab62e43fa998b96de90a56de7e5cc3","sha256":"42dd6e6f77cad47e6ac90a5e4955d890f3bb3572285edbbbac177e210d0726af","sha512":"bf0f43b4456a332c3c09bb9f878dc6a11a26a2a6fba3b6869920ffb3c753e46ad7bf6fffe72382770c57167a96981d2a387cb4eb2dd64abaf285dd8965b155c9","ssdeep":"192:0H9MaxRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kxb9HkS316xAFKpLZEh","tlshash":"7832a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-08-10T04:59:35.697858Z","last_seen":"2026-08-10T20:36:23.275539Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1a31e23b866b6088c56d92b48c2e02f","sha1":"6fa34728fbe3987e3c07012e1eae4eda180aea9c","sha256":"9f9c127cad1c2e43687cdaea9fe8c1c4aa6b97029f4fe6b888362d7b4b6f75d4","sha512":"9b86aee6be4aae315b4496e6eb12ac2b5995a55e9c6b963d23e2a1303b2a094112e4c8621f6d016d2018c6e0296c922d22c532a1c4cc7645345767efb04f6123","ssdeep":"96:zNol9Hqt7pEma7hY/rcuJBPDRIv6hJQ7i16b3n4vkjvxQcsD:zq3HhNYxLRIvgxu3nVY","tlshash":"fbb1859af247b45ac156225150ef3b29f33a281ca61ccdc4b66565f218784cba077f39","size":5261,"data":"","first_seen":"2026-08-10T04:46:44.585779Z","last_seen":"2026-08-10T20:36:23.314816Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/aos.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-10T21:02:46.079676Z","times_seen":22645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-10T20:36:23.2978Z","times_seen":66703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-10T20:36:23.306128Z","times_seen":42256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"635b2ab90482fc5cfb288c4c578ed6b3","sha1":"2f2530001dbc3891de78daeff3feec13e3ae6fea","sha256":"e02be9621724e76b085d0855908191eeac104e40d11ba3d0a43253c4a5042723","sha512":"45c82e864e633965b596cf015e4490ee9a709f0769724133cd372f6d1d52cd5b67ebaa879016003d61a3d53113178ab15457a31ba99396e9d9a6c2be4a6426c6","ssdeep":"384:Nqw/U5YK8Hxhq7ThWazJbUZDkM0kWEYPk6c+UtKM5eH:A+hq7ThWazJbUZDkM0kWEYPk6c+92eH","tlshash":"9352d7a7b2a4782d02379712308f3204f33b7d45b215d919f36ddcea4aa88c16056f3e","size":14277,"data":"","first_seen":"2026-08-10T04:46:44.621948Z","last_seen":"2026-08-10T20:36:23.286078Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-10T20:36:23.27843Z","times_seen":51498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e28ab2f6467f6283a30bd46e9c3604e8","sha1":"bb4f75b3cd6afb0bd30b0bfce6a5c1609b881675","sha256":"776d3483610aef7fb5949ee764804aaef304f29b7135d30f98eba7fb7c6b5102","sha512":"e4499ddb6e435121854ba09b35a6500b4d26f4d019412ce27ce08820f67838ec2c0904b381803a122639aa203a1cb73639e016a1dc924c134cfe88dac2c618fc","ssdeep":"","tlshash":"a8e0265c29407d31935355d714f2ee4c34f23028a95aac51999f8c482a28c8dc528b58","size":332,"data":"","first_seen":"2026-08-10T18:16:28.381525Z","last_seen":"2026-08-10T18:38:37.740321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/fslightbox.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bcb8b6014f33fc9b76d313137f93c8c","sha1":"167b1e36379227a2fa7c635269bdcb0ed8dec4c0","sha256":"77ba0f0971a262f3fe1999d37208a8a7ffa1f2e563d4437bd03b1866a2219749","sha512":"8eb611d5c1bbc30ab697eb8d1fe5d7175f218cdfa3f0c0633363cadbe7d5fe70081cac6aa60e3bf6b39614ec53a429f23cc65e1808be7830311f2af34f393246","ssdeep":"768:x1g+tzeuLaIUfh7VOXqqI09lgHZQLaTVzrpGrav4diKk1CAw5S+EXMm6u:x11tzeuLaIUfh7VOXqqI0XgHZUaTVnpp","tlshash":"50d2f76a7724353881cf119fa06fdb0f237650a2ec0f6445d51ed8e5acb6c6a02a7f8d","size":30524,"data":"","first_seen":"2023-08-06T16:50:10Z","last_seen":"2026-08-10T18:38:37.697566Z","times_seen":1356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a5eeda0642ea11d490f1619/1ju1d0fki","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ad3b4bf30fe8e35f325119a811d4312","sha1":"0f15ac5f757209114d01e7eabcca671ddf8742ed","sha256":"32770a48561679d8929a7c7675014fd6fe3598c60d7edc047220ca82f37f8e45","sha512":"2be3dddc5f36937c6af5a415e90e70c2181b3de82671204774b2937574e5c68b0961ad260a36bd611d12feb684c4f2e5a900c6717680d5d243a7b227a6f688e4","ssdeep":"","tlshash":"6e4136d65b4f6856639410d96cfefd1f38b733da45d858e2570c000172e5bad2a8dd34","size":2123,"data":"","first_seen":"2026-08-10T18:16:28.237749Z","last_seen":"2026-08-10T18:38:37.72105Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","size":348923,"data":"","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-10T20:36:23.305124Z","times_seen":9918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b5959d6bb3f8eab88199e8866ea2cf9","sha1":"73e1c0cfe7002f418432f21908ec8dce2a36416a","sha256":"1fdc4d7762864f58676dc7455dc12a49cc208e9845718e8311ff2b3c972e6340","sha512":"478be658469412ad258dd7b84ea4b9530e10df41afe26e9f5a0089d40997d930a900075d05705e06aec798a5a9dc62cd98a578f5fe0984aaede8646e01098683","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCCGN//h6LiJq:SzP2DASLi8","tlshash":"fa822ba6f149311bc925c751605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-08-10T04:46:44.637387Z","last_seen":"2026-08-10T20:36:23.318569Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-10T20:36:23.300392Z","times_seen":49854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","size":54211,"data":"","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-10T20:36:23.314214Z","times_seen":3121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3023bfbb525208f74b7ea3565aef284c","sha1":"40989f88c7a170c366bcdaad6b53750a3ab4535e","sha256":"3790802fa08d870ade304961390c13b99534b1479f0e8be7c1e592bea881b4d7","sha512":"96d55e21bfc0442d5fd06156654b80adce67b068fca9f96364ad31029a13f145f2ed19b71f4b6fe309174c6e13d26bb8ea4c134aedd4cad997e2230e9ff1a993","ssdeep":"1536:BigMTWFu196woffn32j8DegaOebWbaGlDluK1k+Y+dZPkx3u4V5pfYMrlSf:4nmuTcgGzb4x3u4V5pPrlSf","tlshash":"bea3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":107048,"data":"","first_seen":"2026-08-10T04:46:44.663491Z","last_seen":"2026-08-10T20:36:23.301229Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/jquery-3.4.1.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f832e36068ab203a3f89b1795480d0d7","sha1":"2115753ca5fb7032aec498db7bb5dca624dbe6be","sha256":"4c24dfd28784ad2befb3dafaac6bf1ed4e7cd58cce713d9a0b228d426e812baf","sha512":"b9dbc08c984ae3c7fd44822ec2e9a22cb8cf7da55fa3975dbbdc3f18fd7e7a7793e8d93604826574e3dd6a4f982d7af4f96c1af5e10d847b8394a34a82c398ba","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"b28319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88144,"data":"","first_seen":"2023-03-07T01:24:01Z","last_seen":"2026-08-10T18:38:37.672083Z","times_seen":13124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/bootstrap.bundle.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-10T18:38:37.641167Z","times_seen":17973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/toastr.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbf1260fde6ac3c7d16e4368b2af093e","sha1":"310a3630720dc88eb192da726cdf9fdb540a0803","sha256":"baefedb200a67117ed40391d7502f2bb5edee9de5d775a9bfce518e3cc749bff","sha512":"e0dff23ecabca3071a3b99c4c7ceb95419fdfed7cc3ae73c34de4044468a1f225a7fcbfb8ca7fefc58ba5900f57dcfe77d9993782498668ea39dec227ec24830","ssdeep":"96:ROtzIADXVID/LMpDRAD7tTQufnX5NqgWtdQK69q8OOGOlMixHCh6AYwDjOot:RgTKMAVQuPpNqgoWjrpG9ACRYwDjOot","tlshash":"6d42a6452912a3618dfb73ac9a87900cfb76a323858956167d7c83d8af30614d2f2fdc","size":12633,"data":"","first_seen":"2023-10-18T19:09:36Z","last_seen":"2026-08-10T18:38:37.724609Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/purecounter_vanilla.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a337c9af93cd71a7a9517921879be5ec","sha1":"077f79d84527d7c449112df06d047565553c6594","sha256":"6b68e5ade742f1c41e98d4a7052dcfa69de8a5961c32144adee15091099060ff","sha512":"33ba2d92270980d9fbf7cb99a2f18b3b1f1b9d3f11c37211c34590d9dfcdce87105d1807bef2930aff45b46dfe9ace5183d6fbfe4712c2a4de5ac5654b4c1241","ssdeep":"96:iRrPh640rGYBDCp3oPgonzvMkdJz7zxCrO6U006NEukUHCcx/puPsO5OworU:iRzMfFxCp4PgcMIxC46iPUiy/puPsO0S","tlshash":"5cb1b6897283f0b6c77750a600ef5207b678a561141ec550c16af8d43dbe6bbc313f6a","size":5409,"data":"","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-08-10T18:38:37.735947Z","times_seen":817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-10T20:36:23.269169Z","times_seen":93204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cd2a28d244176c3116c742510b8106b","sha1":"e946422d4669dd8765bec11fd114bf6158e755ae","sha256":"10b77df9d6236b02a643b1953dd551529fe8c6f75d5c1e9efb590889360d1746","sha512":"c0a5e47d1bd48d05ad464f872ad5ecd240a3c1f11e62520a2685bbb931e91cbb843cb06f73d86193124fa4869a4c8b0e6024ef0a3980e0903cbc6bcfff261465","ssdeep":"","tlshash":"3c4183d936e8f9ba434318a1043f9026f635397a097be4c0531dd4f5bc78c89815afb6","size":2306,"data":"","first_seen":"2026-08-10T04:46:44.489478Z","last_seen":"2026-08-10T20:36:23.284722Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5da07e1dbc283bdc85030569bee8d6b3","sha1":"225ba8525f35adfd7c739fc76907045e2b567d57","sha256":"f3519f0ed41d5f4d190562f68968694784c937dd117a73225163b1c2c4faaa66","sha512":"953907d3d92308d3307b563faaaa02a355ed617a65d701458311bbd9c6c345bb8dd0b70f27a3d22fd035ff6263da88563b8ef30f78bb7299706a17d59ea73335","ssdeep":"3072:A8gYgcvYqhJrTodDWFW1WZE8fMOAU8q5pQio/rtxLMz9gZ1a:5ODWFW1WZlfMOAyrKbLMz9S1a","tlshash":"4634c69df186b47606a37130501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","size":243848,"data":"","first_seen":"2026-08-10T04:46:44.561527Z","last_seen":"2026-08-10T20:36:23.274803Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/all.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b250bea6c0b0d73cc1351fa5f8081db0","sha1":"26b64ab5603c10c36eaf42f611062f3400f5f72c","sha256":"fab2c8187c991c10de6cda9c90e44cc01fbfb9e26ecb646a15c600625863902b","sha512":"d9b3213a413f002cf6d5d253f3304e32031e70dc71d1ddfb34d0fcd3713192d2a229d4b37709fe2fb8bd7dd71cc3fdd5d3a80cfc305629b62642f28c74003d37","ssdeep":"6144:4TrRrD1LXoma8Ls8FkHAwEUOG9mjkkj/OBD2n7gYKf4Hy7DM6uHyAMdIv0wzPxIZ:yNsRH/9mjkk7IALKfVDMvlMdS5ML0HQ","tlshash":"fb65752cd35993bc9e96c7b5ca2134746d8e95ed71e09328a27cc5b072630dcd2dacca","size":1472375,"data":"","first_seen":"2023-04-01T11:13:04Z","last_seen":"2026-08-10T18:38:37.74233Z","times_seen":1301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/small/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.904Z","timestamp":1786387082904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/1/small/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: RD8/CCJVcwChTZPwBjQz+5K5kXOIoo3rLLgQ6EFueI80FE69dhWU+75NwMNDqmZn2R7IGG0w5B/O6QeJYPN+YruwDx7+zxaS\r\nx-amz-request-id: 0G168M4Y0NF2YFY7\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"a8850cb1a50f04f848166f3a66f34b5b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: faIEgcgn_dbVO8zzWUh0AzJSg6B5kdIv\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFV5tmYMyL0uCMVvSHD6BcXWgRUV0gM0hM8dMjB1FwVrjstUsVNVFdeP5FfKRleIgkeWO%2FvQXQLUgCTiLSHJbRxiHSSuB67q19Qw9wdrycI7TP0R1KOn1Gl772ESZvlEVgT%2FaXI3exrisSC3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d843ea70b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2514\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2514,"size_decoded":3479,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a8850cb1a50f04f848166f3a66f34b5b","sha1":"abb87f27a7fdec4738714c7d22fc9ec1218e9e14","sha256":"6ab43dedc21519e1974d8a73f07f15f029ea7598d733201af3fc06fe9344256b","sha512":"96a0946e9d3757a2bdf7ac48c43a1ce920aa3c48110898a20ebcec67f1c1eebad65ff960097e626c7078c653e35851034ccde0b3f572859483086cc38f8a85da","ssdeep":"","tlshash":"c4514cdc3831403cd1bfaf6a341e1110c47a75c9a36d9c04b894fee41a7c994f86cd85","first_seen":"2024-07-19T21:45:37Z","last_seen":"2026-08-10T18:38:37.63853Z","times_seen":679,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/69134/small/Rain_logo_1_.png?1762952191","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.941Z","timestamp":1786387082941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/69134/small/Rain_logo_1_.png?1762952191 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 5XY04oJYOQ63RbaoMchckXWxu+/BQT9gYLzQAHQ3ImUreSbdWt6klEi8QB1R7JQ1Gnh7OrVntCc=\r\nx-amz-request-id: EWGBEG94YTQQ04GB\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 12 Nov 2025 12:56:35 GMT\r\netag: \"1abcb55653cc3b5ac962108207ca2590\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TTKtP25OLEd7vqfq9.zvETkdHFcx_MsG\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3165\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZrVa3wX5GCCMTdTpbpZP3a2PLw6wvpmoDhVrEgl%2BnUex95VgaHj%2BiOQsLxHnTIDoFbgDjQ9o9Djk0Hs6cEyoIMhWXcEnurK7GGlznfTclTvmOR9KxyAXZoVx0i%2BMsIY%2BwvkxezEXB5bNmMe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d845eb30b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2895\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2895,"size_decoded":3845,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1abcb55653cc3b5ac962108207ca2590","sha1":"ea88e510035cb9476c35a49809828b589051b192","sha256":"149051d85e64483f84cbfb1ba68bddac5b2bd284b2bf16ec965e765ff480051a","sha512":"ae57cb407c5b10f21e645ffe3b6f7a1954ac9c60cf83daee315a883108a4d596e92bb5ede51d2dc8004f60b5a16b0c990e78f3670595b024c7a335986f1d6f2b","ssdeep":"","tlshash":"52512becb07c722ee789456ac7d364d9311709c60574260ef442b2bc9a53b8fb5307e6","first_seen":"2025-12-15T04:23:05.594508Z","last_seen":"2026-08-10T18:38:37.639794Z","times_seen":77,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/bootstrap.bundle.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.729Z","timestamp":1786387081729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22431\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":80421,"size_decoded":22670,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-10T18:38:37.641167Z","times_seen":17973,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/global_stocks.ced79302b5.png.webp","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.971Z","timestamp":1786387081971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/global_stocks.ced79302b5.png.webp HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 03 Jun 2026 22:13:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49438\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":49438,"size_decoded":49706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"885b01c6052adab0e97eceb01799facf","sha1":"f98300a680ea5f1879ec7f4f989ca1588b6f2b5c","sha256":"82c9b8d715631ff55fc4d689b654763609f962f5a6251e229f8bece6feb0dbaf","sha512":"85eb12c723742c5b7f8e34a852c7743569282a8e80886ee62e2fdc417a36c16a3eaabb312463e8743e585cf553e60c272f27cb1d1e97f7a33d365e3a39f85d33","ssdeep":"768:icnN+lUmVye0QjSCIHdnTAicL8CNz3B4avqPlq2/lWpbst:i8NMUBe0oSVpAL8U3FOFtW5st","tlshash":"b623f2539d2266d0e17bd156378b4878f311d2beacb3b8f4852c1e6c1176ee790e0e48","first_seen":"2026-06-14T08:05:09.45882Z","last_seen":"2026-08-10T18:38:37.642862Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/975/small/cardano.png?1696502090","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.950Z","timestamp":1786387082950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/975/small/cardano.png?1696502090 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: vnq65zgkYGHiTvDRQkFbFDxlultIWBo8B4us9oUAzKLEk9JXxmmBfGqn7Hoep0km4TsWMVP3uFre4WfQbXnYSbz3+VIbPbHk\r\nx-amz-request-id: QPENJY2QSZ5F2MYH\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 03:04:31 GMT\r\netag: \"1e0453d0e5670dd366eb0508bbd45b45\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: nuD4N67vMcVH11GHYzNkiPGnFFD4L2zJ\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6713\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TdETY3NW0IsterIan8Z2CWgpRrps5eQZNOp0x8Vun9yMzNb%2BsnhJa0%2FLmaWa213%2BCLLo3n3beGpLiSTjV7JfKILVh8gl0%2BASZngp5Eslx9PHeRy%2Bq8lELsmdVxHeM8XY6YQRoELcBlFO38b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d846eb90b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4750\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4750,"size_decoded":5724,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1e0453d0e5670dd366eb0508bbd45b45","sha1":"5fdb15ab0665376ff50a74e1be44fe8c71952623","sha256":"dc6e15bb2a5feaecc6571be846181ac567529b59f34d682a94cf1fab0f91663b","sha512":"52523edeb024510436a723aa396b9f79a7c5eb1ba189513006e05aed36981f0dda841d100cf3c9c885537745ddf6a3d025dc056a47c5a710ce82ae625e44a7bc","ssdeep":"96:x6ychmckCNJbiK2MOksUOMFiIhuc6VR5qO8uK0wtnFd97WHX/tBJUR4Ter:kvhQCsMeUOMnu3f5pQbq1zUR0I","tlshash":"8aa18fef5010d481dc6248b23e55e6a00ef587934212b4ddca1feb6aa4c9a2c6a42871","first_seen":"2024-11-06T16:01:50.598033Z","last_seen":"2026-08-10T18:38:37.645789Z","times_seen":261,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/35021/small/USDT.png?1707233575","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.965Z","timestamp":1786387082965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/35021/small/USDT.png?1707233575 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 3iV/b2tatiTAot6ysGXOclIYzRn3BUG/HYD32gqenRoYOx69pYwVlpTOKuZ+Q2S4kWYuUdvmIThPS3fLWa6LatF5iyXxQWa5\r\nx-amz-request-id: XN1ECEHKJD4D42R7\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:55:11 GMT\r\netag: \"769c3939dd354adf68d8aa2113d8024b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 3xPyTT0YrFjQYxEnUB9uAyHQI0wuI8If\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 1404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHVeZxPVq1vx%2BIJxmkijAsLw2CGoOsNHAoSHzIDwI%2BJgfdiiEfFR9NrSycWXGUTiAxyvebxz9ZT1gd35a2dpLukcT91fVrm1X1%2BQYrFTb%2Bvrky628bKmQyrUo1LaBFEa2n3hfvKMQSbgF%2FkG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d848ebb0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2272,"size_decoded":3246,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"769c3939dd354adf68d8aa2113d8024b","sha1":"cb62d50819bbba75f37d0a20ff2f7add60c33a5a","sha256":"aedb08d93978a495247333a9f16fad5b382d0fc78d444b391fdd1cc44b1b33d2","sha512":"eb0e33ce15c95d630ca18fa6b3616a3ae02739e193d6e3565e0a7ff5588e97e85585fe864fa6a350be762137f89dcf29942bc3776e1faa5c7f0ac6ea37f73173","ssdeep":"","tlshash":"e441f8ca009106f1eb124db16d7e8586b8f409e9da2b5328e4a08cc9926de92b25b364","first_seen":"2025-10-15T03:49:24.073846Z","last_seen":"2026-08-10T18:38:37.648915Z","times_seen":204,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.638Z","timestamp":1786387083638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"635b2ab90482fc5cfb288c4c578ed6b3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88b8ef2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14277,"size_decoded":5536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14277), with no line terminators","md5":"635b2ab90482fc5cfb288c4c578ed6b3","sha1":"2f2530001dbc3891de78daeff3feec13e3ae6fea","sha256":"e02be9621724e76b085d0855908191eeac104e40d11ba3d0a43253c4a5042723","sha512":"45c82e864e633965b596cf015e4490ee9a709f0769724133cd372f6d1d52cd5b67ebaa879016003d61a3d53113178ab15457a31ba99396e9d9a6c2be4a6426c6","ssdeep":"384:Nqw/U5YK8Hxhq7ThWazJbUZDkM0kWEYPk6c+UtKM5eH:A+hq7ThWazJbUZDkM0kWEYPk6c+92eH","tlshash":"9352d7a7b2a4782d02379712308f3204f33b7d45b215d919f36ddcea4aa88c16056f3e","first_seen":"2026-08-10T04:46:44.621948Z","last_seen":"2026-08-10T20:36:23.286078Z","times_seen":50,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/all.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.731Z","timestamp":1786387081731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/all.min.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 511608\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1472375,"size_decoded":511848,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"e5f88e50fddb49f2b66d2c74390a1d78","sha1":"a3b4abc02af61323bbb10fae88d959102444811e","sha256":"f71f07484a0ed8aeeebc46c508b89673c82b6ae357d695a56ec81952c57669e2","sha512":"c119b543a7b2cb16ce4c3f262df4225f18224c291dab85c9bcc203cfbc1c48a35c619317c1cd309b822461a4c4d0a0bd929642b7d4fac19dad0abdef7f04bcf1","ssdeep":"6144:4TrRrD1LXoma8Ls8FkHAwEUOG9mjkkj/OBD2n7gYKf4Hy7DM6uHyF:yNsRH/9mjkk7IALKfVDMv0","tlshash":"88256238d35493bc9d96c7b5ca2124b4798f91ee71e0a328a27dc5b072620dcd2ddcda","first_seen":"2025-08-04T10:04:47.100456Z","last_seen":"2026-08-10T18:38:37.650434Z","times_seen":1192,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.963Z","timestamp":1786387081963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29164\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29164,"size_decoded":29431,"mime_type":"image/png","magic":"PNG image data, 243 x 168, 8-bit/color RGBA, non-interlaced","md5":"6ab5d197a735211d13992ecb272d9df9","sha1":"828ec439f2741ee07aa5253ee72d52cd7e4bddcf","sha256":"3548d7c5eeba4c94f146c1443e34152b3bb7e32c649df7d35b929895b0a776c0","sha512":"747473a2b23c2ee4fa6e02bff869d1c9557ac4951fd70658e8ddd3bed85d7f260c4b8a18e6b918f18739a2640d204dfcdb0c2894ea8dd3d667514b4daac6cd32","ssdeep":"768:AwNlaXtOBOoweUDyYurUdXjm4EVgglSncz:BlAORfjLrURZEV6nA","tlshash":"0bd2e1a8d6300aaea1278b40f54e51c4407eff6f2e0c107bf1dd6e11757f8b0b9a9625","first_seen":"2025-02-26T15:15:16.419607Z","last_seen":"2026-08-10T18:38:37.651044Z","times_seen":311,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/7.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.967Z","timestamp":1786387081967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/7.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3805\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3805,"size_decoded":4071,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"49dd698bac46f3f6f9a73329afd73c60","sha1":"cad973ea3e3325f8c7c47bd633c0f6ded59dd9a2","sha256":"b6b969af16d0c800b8567e8baee5a5c6a4ab7642fdc7b5734428fa16ede86c17","sha512":"9a137e00e516a4f1fbf134bf21354957d55cfc72b64d0de405ea3b0b85bbb2c8e9117616bdececb4a439f304032ad3a178623adbe7afd6a8574a2afa5c737224","ssdeep":"","tlshash":"42718dcd22c814a26f493bd87745e0ce61176a5cbf3b7c129a5a0d32b0219d53a2c780","first_seen":"2025-02-26T15:15:16.424914Z","last_seen":"2026-08-10T18:38:37.651628Z","times_seen":306,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/css/style.css","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.551Z","timestamp":1786387082551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:21:27 GMT","end":"Mon, 26 Oct 2026 08:21:11 GMT"},"fingerprint":{"sha1":"07:05:30:82:57:E3:B8:BD:49:2F:74:83:02:E5:40:11:01:83:1A:33","sha256":"B5:84:A9:E6:B9:9B:98:0E:3D:7F:76:DE:8F:28:1F:81:BA:BD:75:92:81:CB:FA:9B:87:E2:50:EC:D3:5A:42:75"}}},"request":{"raw":"GET /widgets/assets/public/css/style.css HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: widgets_csrf_cookie_name=37695d9f26c25337fb58093458ea928e; ci_session=tnh5onqqcaj39jallo77r9j6aqkvc806\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nlast-modified: Thu, 13 Aug 2020 09:10:47 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\netag: W/\"c2be2f2d17f1ad2e99e26d7d1f03710e\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b80af6d90290b622c680fa62cff91fca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: IQ6wNACGdx5c7rVuW0FvbxAO5KCjwg0m2Y6kxzw2zkOrrK70yF18vA==\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 1892\r\ncache-control: max-age=14400\r\ncf-ray: a2911d81fac956bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":50710,"size_decoded":9819,"mime_type":"text/css","magic":"ASCII text, with very long lines (50709)","md5":"c2be2f2d17f1ad2e99e26d7d1f03710e","sha1":"ebc05b4d01edec633c9df96b4b0d41b15cfc612d","sha256":"06a92e9862a29259429538cdf7a2cb5675e8675d0edb9cfb26eba6e58e826245","sha512":"93e9541ba0917deb25e1e7d3cd61358670318cae49c82e6af2471e507f2214c25b855d2a6adbe024f031d09f0788f2356f4b826da5269bcfcd525d1ec8eee9ff","ssdeep":"384:El8298DchESZnQshDcIqPKUyZAjq+AjqaAjqCh2WVlhLN8Lt8/ty7UBj40ZkS5tT:YWDtYQODzxUy6h2WVl6Gj40AgR3eBx2","tlshash":"6d337621fa427219277ef4116df0f39a627c513191314b7afa9793128fcac9ec352b1a","first_seen":"2024-10-27T18:02:30.419505Z","last_seen":"2026-08-10T18:38:37.652201Z","times_seen":664,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.coincap.io/prices?assets=bitcoin,ethereum,tether,bnb,usd-coin,xrp,solana,tron,staked-ether,figure-heloc,hyperliquid,dogecoin,usds,rain,leo-token,zcash,wrapped-steth,monero,wrapped-bitcoin,cardano,whitebit,binance-bridged-usdt-bnb-smart-chain,wrapped-beacon-eth,chainlink,stellar","fqdn":"ws.coincap.io","domain":"coincap.io","tld":"io"},"ip":{"addr":"104.20.46.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.917Z","timestamp":1786387082917,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"coincap.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 10:47:19 GMT","end":"Sat, 31 Oct 2026 10:47:18 GMT"},"fingerprint":{"sha1":"6D:4E:B7:EC:B5:D7:F3:41:65:E5:91:8F:7C:F4:A0:19:D7:D0:79:A5","sha256":"05:C3:C7:0B:83:09:A7:D5:82:78:1D:C1:F9:61:49:99:90:A0:99:B3:6D:F9:DC:EC:F9:9F:45:E1:AE:A1:E7:AA"}}},"request":{"raw":"GET /prices?assets=bitcoin,ethereum,tether,bnb,usd-coin,xrp,solana,tron,staked-ether,figure-heloc,hyperliquid,dogecoin,usds,rain,leo-token,zcash,wrapped-steth,monero,wrapped-bitcoin,cardano,whitebit,binance-bridged-usdt-bnb-smart-chain,wrapped-beacon-eth,chainlink,stellar HTTP/1.1\r\nHost: ws.coincap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://oroviento.pro\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Z54aUZcBc7yRUjQWN5ZgkA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 10 Aug 2026 18:38:03 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: oCXkf76aQipHeqemkYn26OSL2KU=\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: a2911d847c1656bf-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":242,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":24,"connect":21,"send":0,"wait":265,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/27045/small/wbt_token.png?1696526096","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.953Z","timestamp":1786387082953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/27045/small/wbt_token.png?1696526096 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: kC+WpymH0vSKCTvQe0kV5Pnh++ImXI0Ao9mG3HY83RYIE5bf6pX45U+CRe92XJacA4rkuo2wcLk=\r\nx-amz-request-id: 3FAWW9Y967BF24SZ\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:47:16 GMT\r\netag: \"e9ce59a5052a0a5d536e6e7f5e7f8bfa\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VO6ljPZr2WLzrgNWbfnknc2iP12Fbxae\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3165\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69bi2h37LfS45ZpF6TUnuJB%2FYVqLIg0mkr2%2FmK5iLnNqo31VKGZcwVJfJ0XRu2p98w4cJst1S0PVIr%2F7C8doBMt5lZe0uWBB6VggIQ7G%2FxV1dMCMWsbkSS87PwkcfOSQzhBzAMSIzzKm7kUw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d846eba0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2762,"size_decoded":3714,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"e9ce59a5052a0a5d536e6e7f5e7f8bfa","sha1":"9ef945c1beb489ccb8e4e37d049c87e9fc26fd89","sha256":"ee4f53620e584396e30caae6c412c23ccec03c57e0e59bf101504c4ad9bce5d7","sha512":"2306221934488dd65e3f34197b6599ca8131d89628b21bc945141bdb7d1f49906392d730ed83e2c34cf065567e0ab275d80ff0105892636759856ba0fc7baa4f","ssdeep":"","tlshash":"02515cf789e7fd64a8217499594f3f50a0392f62a55384cc8fa8c829a1ce6ec0e09a00","first_seen":"2025-03-05T22:50:33.65811Z","last_seen":"2026-08-10T18:38:37.653665Z","times_seen":153,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.772Z","timestamp":1786387083772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"1419f2a1837ad0239c12ed0298d67590\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d8989252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102656,"size_decoded":23012,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1419f2a1837ad0239c12ed0298d67590","sha1":"45d8dbfeeecc27db2ef5707a1f3808a66c1d2b9f","sha256":"6dd414390ef7f11315507ed32ddfef2b85d3f9a683db2bfb8cdef66b6264ab70","sha512":"c41f632c69630b0f20ee3523e6da536d10fe5e109b8a2ec2fc3305c3b8f0b7185695d980229e6ee57db83823a1ab2f120c9677670a555dd9a681b3b2f50c3a19","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBC4ikauV3cGiH27PNWE98MGfU0nPROpmi0m:xfuVLmi0V0Z+tKaK","tlshash":"41a399b2e56710cc7363c22692c1faac1029e370c757caa9f827767d4bc25963562f9c","first_seen":"2026-07-02T06:23:48.069239Z","last_seen":"2026-08-10T20:36:23.265981Z","times_seen":3586,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:05.018Z","timestamp":1786387085018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 10 Aug 2026 18:38:05 GMT\r\nage: 1183753\r\nx-served-by: cache-fra-etou8220049-FRA, cache-bma-essb1270077-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":40204,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-10T20:36:23.27843Z","times_seen":51498,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":10,"receive":8,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/css/style.css","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.717Z","timestamp":1786387081717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 17:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28955\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":259740,"size_decoded":29266,"mime_type":"text/css","magic":"ASCII text, with very long lines (1852)","md5":"5e99a0bf63525b70fa6fbfdd443aa709","sha1":"9c632620bc561fe154739ead12b2ebb255883f54","sha256":"8594d354f39431f42df5df862d9f59b5230854e8eae3150403972e95c68a789c","sha512":"fe627892ccb2b40159bb6cf4789432fc74ceee61c5b8b8f9f3bd2f5958dfe30e3832b64898072ee2882bf31cfe00751196fa20c2b6ae65d80bd9f23223bf6314","ssdeep":"3072:z8btA58BUxsaAbG9rApJIypgCasEPDnbBDHQmsk4MF1Y:z8btA58BUxTAbG9rApJtasEJDHnH1Y","tlshash":"0d44b5e8ade615093027e23c47ea7758377c9403d71d9fa4bba512688f863f8907368d","first_seen":"2025-02-26T15:15:16.382067Z","last_seen":"2026-08-10T18:38:37.655751Z","times_seen":222,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/logo/logo.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.934Z","timestamp":1786387081934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/logo/logo.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Jul 2026 23:26:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 80175\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":80175,"size_decoded":80442,"mime_type":"image/png","magic":"PNG image data, 3250 x 1978, 8-bit/color RGBA, non-interlaced","md5":"91c34935f605fa652ce117b038119d81","sha1":"e4905eb639943e6ff26e40960e2b21ef68c4a99e","sha256":"0494e946491666e8e9a53a1db434c89db9a08ddda6feb4f8995ea92643dc1cb5","sha512":"49fca523c0c5172bb7d129b6794ff0c306310dad08966897a8891bd3590e6116756c3a94be433ee9c2a9df00bb7c1e435fadb7993eb7351a1ceac99f5d55a4b6","ssdeep":"768:IAfF+WrWptAJbN3X/27Hc5ej9wCQaMRrioNmBWE+/tnhSY+0QhafXwmRbjse8sPA:jfF+Wrcmt/27Hc54y1k5fR0QhenPwqVu","tlshash":"7b73023534fbe065de3400f5a9f22aa4762590b312776cf86fa894333971e52728b726","first_seen":"2026-08-10T18:16:28.284347Z","last_seen":"2026-08-10T18:38:37.656452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/service/3.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.950Z","timestamp":1786387081950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/service/3.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1790\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1790,"size_decoded":2056,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bdb32cf309f476977d5765ff52ba3383","sha1":"f6d04bf12b2d5489db26c6213eb5b96dea2a8960","sha256":"da4ce0412c4523c4e58904d849b0b2a577dabce83369df29be314b6b8a0429d1","sha512":"ab13de736144db2234db12f756280b86bdb86a178b10d2e96dcffee3200497e8454a0dacadd57d0a03038a32932d8de58449f860aae62c21b517fdfb8eaf6ae7","ssdeep":"","tlshash":"9b3109c264eaad6dae1b3c24857b2dbd7379466734a26c094d158d0f8382b8c4b18f71","first_seen":"2025-02-26T15:15:16.407499Z","last_seen":"2026-08-10T18:38:37.658066Z","times_seen":359,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.778Z","timestamp":1786387082778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"5da07e1dbc283bdc85030569bee8d6b3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d835a28569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243848,"size_decoded":69417,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"5da07e1dbc283bdc85030569bee8d6b3","sha1":"225ba8525f35adfd7c739fc76907045e2b567d57","sha256":"f3519f0ed41d5f4d190562f68968694784c937dd117a73225163b1c2c4faaa66","sha512":"953907d3d92308d3307b563faaaa02a355ed617a65d701458311bbd9c6c345bb8dd0b70f27a3d22fd035ff6263da88563b8ef30f78bb7299706a17d59ea73335","ssdeep":"3072:A8gYgcvYqhJrTodDWFW1WZE8fMOAU8q5pQio/rtxLMz9gZ1a:5ODWFW1WZlfMOAyrKbLMz9S1a","tlshash":"4634c69df186b47606a37130501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","first_seen":"2026-08-10T04:46:44.561527Z","last_seen":"2026-08-10T20:36:23.274803Z","times_seen":113,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/fonts/massive-crypto.woff?v","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.900Z","timestamp":1786387082900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:21:27 GMT","end":"Mon, 26 Oct 2026 08:21:11 GMT"},"fingerprint":{"sha1":"07:05:30:82:57:E3:B8:BD:49:2F:74:83:02:E5:40:11:01:83:1A:33","sha256":"B5:84:A9:E6:B9:9B:98:0E:3D:7F:76:DE:8F:28:1F:81:BA:BD:75:92:81:CB:FA:9B:87:E2:50:EC:D3:5A:42:75"}}},"request":{"raw":"GET /widgets/assets/public/fonts/massive-crypto.woff?v HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://static.cryptohopper.com/widgets/assets/public/css/style.css\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/font-woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 12 Aug 2020 10:33:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\netag: \"3bcd011f5d52c70360814408e5117ca9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 3z3Y39BIVLUAh3Fk-FmixiO3EYyaNXG46nAcfQpKCOgJfgZeDjyTOw==\r\naccess-control-expose-headers: *\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nage: 1404\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a2911d841ae556bd-OSL\r\ncontent-length: 2572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2572,"size_decoded":3545,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 2572, version 1.0","md5":"3bcd011f5d52c70360814408e5117ca9","sha1":"ac1afed0a12a978a8ce7d00e070ce7d8ad9d553f","sha256":"e9e9cefc6b956ab037809a318e9560fc82432bb7e59e63d6c9559aef95b62187","sha512":"ee0312dd0bc6596dd977347dd23172fbb070aa2332ea2910f5498dac94304269b8746b694da95661712bdb25f6860c4a1dbfdf1f5576cb25c60e9856b73767dc","ssdeep":"","tlshash":"60514c86ac96d765e5ab257a7af6090a3c2d3034756763ef0b4c46313e0222412cc2b1","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-08-10T18:38:37.659443Z","times_seen":486,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/5/small/dogecoin.png?1696501409","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.938Z","timestamp":1786387082938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/5/small/dogecoin.png?1696501409 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 4OVRcnEvJvbvJTZ6myARtcpMulE1IxNbQQI3o/wty8y7OQBx5FTHpMkFVkBSMnIlBzEHKo8p3V38K47nUBuc57NBGRODDm5n\r\nx-amz-request-id: 0G1BAE6P2HBRSHJB\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:59:25 GMT\r\netag: \"3fe73d0936ccf1dc5467ec873cdaf72e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WNBnx8e0ymV6tGvOV_u69HmOrZqn32u\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3165\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gk1uYdSw3NmoqrByN%2F0bOLfaE%2Bxm3LjfWKpA0kU0r7DvsjjgiBiwDFboaClRZe2w%2FyIzKs9%2Bz%2Bo%2BYb1JsCQUJO99Ww1rpWmH2eWQ%2FIiGSCIdSyfqmTRtkbsvJd%2FSRndhL1e%2FNRJh7UxMMQiP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d845eb10b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4857\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4857,"size_decoded":5839,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"3fe73d0936ccf1dc5467ec873cdaf72e","sha1":"11e79b580ee74ddd41ecb9a652a31623afafbbbb","sha256":"68654f81c92bf7dddcbf66f34aea126c90efe810a31cd59d8bdc5c88d9eec8c8","sha512":"df496833435b1040372906ff757ad08abc82f2f252e234cd8a3e7a93698adf916623baf308b6bb825d9f6d194a5629655300a851d7c3527b509971ba394bc7eb","ssdeep":"96:vqb+VFjgqzURHG6yGlMFK8mocWe4WPNYUDjSyO5++dwtKVuW:DZE3IFK8cZPNYr5LuW","tlshash":"26a16ddff91ae741cdbe06801f2717db2974c6a341aab6e1846912ea28e5d7e1c32710","first_seen":"2024-09-19T19:38:42.345867Z","last_seen":"2026-08-10T18:38:37.660058Z","times_seen":285,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/css/bootstrap.min.css","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.710Z","timestamp":1786387081710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 17:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28371\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":232933,"size_decoded":28682,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"1adbd55377a7c19683cdc5f1da06a430","sha1":"f2723ad67eb83829b5f747f85b123f21fb62dbf5","sha256":"bb773c312539d66c0bf5edea4fc8cea197952c119fe86d533426778af033fb27","sha512":"581db446146f69aab2f64df293252c0f26e2fdc56bb5968d5f6c84cdff133fbd29b35d40688056120659ed538f6e9e361c01f76f7d1fe5e0557136ec7ae24cfe","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qv9A374298wsY/ElV6V6pz600I41r:ntj898fP298uI6V6pz600I41r","tlshash":"563481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-08-19T18:45:28.750362Z","last_seen":"2026-08-10T18:38:37.660706Z","times_seen":342,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/logo/preloader.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.932Z","timestamp":1786387081932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/logo/preloader.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 12 Jul 2026 17:15:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9052\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9052,"size_decoded":9318,"mime_type":"image/png","magic":"PNG image data, 574 x 594, 8-bit/color RGBA, non-interlaced","md5":"c9395f148d0e6f40def6daf3f8d4ee4e","sha1":"4b902d62370f60d72655054cd26754f28d5ac7f7","sha256":"357386b36422dec73f19bcf53e85425781fbf6f867c26959bf95b887ff66d850","sha512":"59e69a42420c865e39d93bfbf8248e7bf04cf2bcd79e451a314f4e925068509edad72492968ae296685e0aff8eb0f4f1efde2d159f6e493545f8f38237002e8c","ssdeep":"192:x7GVpzEvmDtcRRIN/4qlXbOSwWkFlilidX4Kz:xyVNmwweO6kF88V","tlshash":"0b128ea1f81d213bed6811f89045dd57f61c5ac3e243c18c66b763a4af345c6abf91c8","first_seen":"2026-08-10T18:16:28.265279Z","last_seen":"2026-08-10T18:38:37.661334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/partner/light/5.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.945Z","timestamp":1786387081945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/partner/light/5.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2280\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2280,"size_decoded":2546,"mime_type":"image/png","magic":"PNG image data, 117 x 48, 8-bit/color RGBA, non-interlaced","md5":"71fb19b2879b7a192bdb930958737aef","sha1":"5e64a6ce0549b9889735c43e2161c0fdb1618b6c","sha256":"f6c5b272125f6c68a05f4f72a29deb19746cf25e5e18449462cbd096ebfb849d","sha512":"d64b7a136a3369fb68eba5536faa5f1f7f35c799126194826416f0edaa98b67a77d9f0fcf3f1f7f74ca23c98559778e4cd4b919f1a469b1d455a3bd715216819","ssdeep":"","tlshash":"c3412bdd2bcc719eda3a255e6b88adfbe17c37718f8c81a0be1f589c0471b152650831","first_seen":"2025-02-26T15:15:16.404753Z","last_seen":"2026-08-10T18:38:37.662395Z","times_seen":280,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/about/home3/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.957Z","timestamp":1786387081957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/about/home3/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30356\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":30356,"size_decoded":30623,"mime_type":"image/png","magic":"PNG image data, 402 x 473, 8-bit colormap, non-interlaced","md5":"4c942bccf58527a1b2164947b8718e7f","sha1":"24830d9698688a2b3ac51cab7b05880e2172cffd","sha256":"ed7fe892b4703985cdaef2c1503d7584214fdec3238e4e21d4f060bd3226828a","sha512":"45e168d816df0c75aaf1e80987670c61ecff816c5faa73a5d93f177005a78dae39c1e5a0b56e46a81395804a72e9a81f48664d5b11759a877bdf8019451b0552","ssdeep":"384:py3TY4BSxHVEP4UFbO67VwrvzxP9ZxVY0P2Pl4Jl2w32WcsxZnF8gYYA8fBj66X+:eTY4BisLO1108Us8gDnf19wCS","tlshash":"dbd2e1dd8aa24f88f066073ee63511724f55d7aa0231aedff681811c639e51c0de9dec","first_seen":"2025-02-26T15:15:16.422854Z","last_seen":"2026-08-10T18:38:37.663086Z","times_seen":265,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anek+Telugu:wght@100;200;300;400;500;600;700;800\u0026amp;family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.091Z","timestamp":1786387082091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Anek+Telugu:wght@100;200;300;400;500;600;700;800\u0026amp;family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 18:38:02 GMT\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9904,"size_decoded":1270,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d982be98b67154dfc06bb2bcd5564ad0","sha1":"aad432f051db7301e0079a318d9fc3a85062ae11","sha256":"1ebc95ba41f105a937703c7e3f0135fc99fb53321c780e7d08aec617eedbd969","sha512":"82d5c09f33a9935296d0370dbeff6606e9de455766719834b511b80501368201dc1e82f69f6c6f7197f5a3ee501557b655435d4abdcbdcb9946be4fc0b340a3b","ssdeep":"192:2PhEPWTP/hzWGchQWRhhtWMWhiWvLhnWqohkWV9hRWQ1:2Sk0","tlshash":"9112d0a2011fe6d066c75cc226ea7d3add0f3170244694366bfe24e8aca7c335352b5e","first_seen":"2025-09-21T11:59:02.842929Z","last_seen":"2026-08-10T18:38:37.663706Z","times_seen":205,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/4128/small/solana.png?1718769756","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.923Z","timestamp":1786387082923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/4128/small/solana.png?1718769756 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: ouabb7zF7japMhw6CKij1IClcaGZFPH9uJ3N1atvpAKBbv++uXTdmKzn9b/GGkefj20jMHfoLsM=\r\nx-amz-request-id: THRBGRQ7K30D5PK9\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"9f6644b0f146e9c7cad0c5b20b506082\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cnRoe6CaxjUACi2X2EWAhiEsPtVd4cYj\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Nr6cPWL57mnSJcljZAAE1erkT2ayaeFRYiyJGnEORtn3WMt2rjCkkZL8JDaYUx%2BmRutjumlPX74zCtEUp4AoHLL%2FgrlR5%2BBFj3xZ%2F%2FOn3FYcnR6K8T3PGJn40%2BcxmIFQDPN3NsYGQUb6E6%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d844eaa0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2225,"size_decoded":3181,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"9f6644b0f146e9c7cad0c5b20b506082","sha1":"9f1232c3341ca8009407b441505fc307965fdf2a","sha256":"bd46e6d28abec9f7c4b462350aac62747dc34ac6160bba18174d67efdb33ed91","sha512":"1c643f4f862fa8fbc8a488be9af5f4e9fc107c7ac40e320977f2083ead90f6aa5944f3629749a43757e479983228629740e31caeb3f34d4c6d18af90f6b2b53b","ssdeep":"","tlshash":"f94129925711f7bbdaa9013475650901fe7d991c66b12ba5a18ceccc0819f94b80cf5f","first_seen":"2024-09-19T19:38:42.354997Z","last_seen":"2026-08-10T18:38:37.664746Z","times_seen":233,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/13442/small/steth_logo.png?1696513206","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.932Z","timestamp":1786387082932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/13442/small/steth_logo.png?1696513206 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: g5GU53AD752wlr2UxNNeGnKpkff1Rcnc/qzXWbsIHK8aLDUCiyt5Y3CWD2B8Xzktoe0dztoZ1pqVpihY8Om3G6v0IBxrUaM9\r\nx-amz-request-id: 7RJB6C2Y5HM0FN46\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:32:21 GMT\r\netag: \"540e7728a0b6d54d05412b981cde9f1c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: byzlxdDpHbYnwu1.Q_jVGBJ0UiWtSPmF\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 1404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dht1SC50aB86qT1tWtezell6SzQ0zQKauUCMsA%2FejmHlnMjBYUyVVOk4Gb5i4RiPBcYgqgZYDjLY5i0DN%2FVV%2Fq86WKUq0ZoID7CeBG2F85RvIg7ZaicsbtiWeLJwhbhgsmJU4s06eZ3KeDai\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d845eaf0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2399,"size_decoded":3369,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"540e7728a0b6d54d05412b981cde9f1c","sha1":"62e657b7591d9a409a8273089f50de9f27c52003","sha256":"cbfe677ee78f8e9fb1297e76599b517009cbb41faf640e4d194a263c5a1256f0","sha512":"fea5eacc3ba95683555c0864fdf042c6a43793c7b34ceeab028f136ef4fbe99270d2be7bcfcd1d4577f0b6ed34daba8d58ab887b4d57d2cba98ff160bad14334","ssdeep":"","tlshash":"5b415dc0e40092b98d570dcc4285295a1eb5f8fb03e6cfc1a4143e4e0a995a034c2f7c","first_seen":"2024-09-19T19:38:42.343643Z","last_seen":"2026-08-10T18:38:37.665421Z","times_seen":420,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/banner/home3/2.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.959Z","timestamp":1786387081959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/banner/home3/2.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4821\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4821,"size_decoded":5087,"mime_type":"image/png","magic":"PNG image data, 104 x 52, 8-bit/color RGBA, non-interlaced","md5":"7b09dff2ceed5d683208d74074034ee7","sha1":"46773ea781fd69921e3aaa6d6b0959fbd5382635","sha256":"d7325bd546b48b4a9dd060c81b2348c7e1e4c561587e8c73d816ba7e06ac0948","sha512":"eecc0df2c891e998790f6b4ed92d50c2bcc8c870f52764a25e7519fdf25f133bb784d996945f7688203ccfcb7cd59c4b1877caabb87d5fe11bf211299403bb7f","ssdeep":"96:RSB2Cxjj7zgcjlmIVVzAgnueMcKSLA4CqeqH18kmyZCGKdMQw8bYh79y5EtEEcMD:RS4Cj7hjlmEzA9XcKSLA93qHOtyZCXK1","tlshash":"62a16c9be7a1f32c97e59f895285705366b9c3a802110029fc017f1e5bce61f4acc76a","first_seen":"2024-08-19T18:45:28.751815Z","last_seen":"2026-08-10T18:38:37.66608Z","times_seen":318,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.877Z","timestamp":1786387082877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oroviento.pro/\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 10 Aug 2026 04:42:12 GMT\r\netag: W/\"17fa2497bdae7324a17eaedfe6fc8650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d83fa32569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11596,"size_decoded":4376,"mime_type":"application/json","magic":"JSON text data","md5":"17fa2497bdae7324a17eaedfe6fc8650","sha1":"27bce6a96d49d0077bc16228801a3089fce5be2a","sha256":"cce37a30801a132937edb0ac257f4ed917559c00d6a648716bd9ac406cfc62b1","sha512":"f4155fcb97d0180daa46cb293cd70f01b984c39f9895f76a0acc098b0c5f86f883378620e75f8fb79b0e0b1e5033e4ace16046bc48ca2a9c2127053ae48be305","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"98323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2026-05-13T09:28:21.606546Z","last_seen":"2026-08-10T20:36:23.285441Z","times_seen":11314,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/486/small/Brandmark-Yellow_%281%29.png?1785810558","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.943Z","timestamp":1786387082943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/486/small/Brandmark-Yellow_%281%29.png?1785810558 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: IHeey7JVTDTAgcH3DzGWG0lqJWUjnKLravJh1u5l2Wx7oSxrjVO5MaiyINijQKzjYSI2MSfU9fLbP3L+V8681Uju6kZ4C4sk\r\nx-amz-request-id: QJ1X5NAS3CCFJ7AA\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 04 Aug 2026 02:29:22 GMT\r\netag: \"d4c58452a3a7d7732c8cd3113ad53e0a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RZkln4sFBXDXlduCRr14ahTPmCKBYdma\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 7164\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyQbQcrTk7eXdkYNh9tIefDmKO4daFFGSsF3X7s5meAsUXtIp7WX6lg%2BcxFW9w5Jkb22NVO8guXN%2B%2FjaEu0mMaih%2F1nR%2FMizB6u4cmpZ2w%2F3RSfgtP1cUbsV7AdYxQlmiLzL7HMFa%2BKj3Dg6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d846eb50b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2383\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2383,"size_decoded":3359,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d4c58452a3a7d7732c8cd3113ad53e0a","sha1":"7159d59efc5b05240166717bff363971c5c3c832","sha256":"db17bd59d31438e2f54b1316497b7eb2f9f8bc3e70c5418077ed148a30271dce","sha512":"c0ea2deb77f5fc9e907fc69ea8a6a504837feec20ffd3e1cb2400a8e671b820cbe6c66c695b668d549bd944e84403508303d03cdc33a865fd869a7d14cc0352a","ssdeep":"","tlshash":"da410aa66717f07a6f2a2931cfb0c695ee291f078d76521300063edf092532525cf5ab","first_seen":"2026-08-07T03:09:15.920869Z","last_seen":"2026-08-10T18:38:37.667271Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/7598/small/WBTCLOGO.png?1764496367","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.949Z","timestamp":1786387082949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/7598/small/WBTCLOGO.png?1764496367 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 7Z+zXNIryvj5T+T45Nydm+yB3MdL1b3UrJvbof6sGstfXTx/eUEwlyTU6fbwX1H1aiG3TXR7AjpifpEiwK7qK5Kv2Kp9F2nP\r\nx-amz-request-id: 0Q04HJR20QS72HJ1\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Sun, 30 Nov 2025 09:52:50 GMT\r\netag: \"edeb2b5bf5419d22d26d3504a44f4824\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2CVLPCFNA.zPLwVC6Rg1MmM00SGMp.WR\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 1404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qj8wBJzFxm7HRaQJMyqnyXz6NOhwYSRnCArNzJnsZB9WEnBjVh2CScDF4f%2F62tvBVU8ihIEX7VNYI2Lkv%2F6MzvHbw2IdPqaz%2FnYwyh9ujnQD2d%2BVyuS6Teq%2FBgShVMigj9X8RzVgRQXXRfXa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d846eb80b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4096,"size_decoded":5068,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"edeb2b5bf5419d22d26d3504a44f4824","sha1":"345fab59d6d6520bde57b6d1b7d8ecb11bf3469a","sha256":"f66662485424817a2b70f199eae85f03dd9c8cc56a59735b1dec09340d39fe3c","sha512":"a710ded6a4b35468d5c90eff36dd407ff7a8a1de611fc5935ff8ca75a8f0a9da38582836345402dc56258999e0c38e3a29d8605159647b8c50c307537749eed5","ssdeep":"","tlshash":"3a818d8da17449caee002f13a14a8f715970556ca23c76e44862ac58c89b27a7d8f9a1","first_seen":"2025-12-03T04:01:51.642861Z","last_seen":"2026-08-10T18:38:37.66861Z","times_seen":171,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/js/script","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.924Z","timestamp":1786387081924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:21:27 GMT","end":"Mon, 26 Oct 2026 08:21:11 GMT"},"fingerprint":{"sha1":"07:05:30:82:57:E3:B8:BD:49:2F:74:83:02:E5:40:11:01:83:1A:33","sha256":"B5:84:A9:E6:B9:9B:98:0E:3D:7F:76:DE:8F:28:1F:81:BA:BD:75:92:81:CB:FA:9B:87:E2:50:EC:D3:5A:42:75"}}},"request":{"raw":"GET /widgets/js/script HTTP/1.1\r\nHost: www.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nset-cookie: widgets_csrf_cookie_name=37695d9f26c25337fb58093458ea928e; expires=Mon, 10-Aug-2026 20:38:02 GMT; Max-Age=7200; path=/; domain=.cryptohopper.com; secure\nci_session=tnh5onqqcaj39jallo77r9j6aqkvc806; expires=Mon, 10-Aug-2026 20:38:02 GMT; Max-Age=7200; path=/; domain=.cryptohopper.com; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self' *.cryptohopper.com *.cryptohopper.tech *.candletrader.app *.hotjar.io *.hotjar.com; object-src 'self' *.cryptohopper.com *.cryptohopper.tech partners.liquid.com *.candletrader.app widget.changelly.com *.intercom.io *.intercomcdn.com *.posthog.com cdn.paddle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.tradingview.com *.candletrader.app *.cryptohopper.com *.cryptohopper.tech *.posthog.com eu-assets.i.posthog.com *.intercom.io *.intercomcdn.com ajax.googleapis.com cdnjs.cloudflare.com static.cloudflareinsights.com *.shopifycdn.com *.myshopify.com sortablejs.github.io cdn.paddle.com www.googletagmanager.com *.hotjar.com *.hotjar.io cdn.jsdelivr.net optimize.google.com partners.liquid.com widget.changelly.com s0.2mdn.net unpkg.com wchat.freshchat.com cryptohopper.webchat.freshchat.com cdn.plyr.io cointelegraph.com s3.tradingview.com connect.facebook.net d.adroll.mgr.consensu.org d.adroll.com s.adroll.com cdn4.mxpnl.com ssl.google-analytics.com bat.bing.com s3.amazonaws.com platform.twitter.com cdn.syndication.twimg.com cryptohopper.us17.list-manage.com ajax.cloudflare.com www.gstatic.com js.stripe.com www.google-analytics.com www.googleadservices.com www.youtube.com www.google.com googleads.g.doubleclick.net static.doubleclick.net cdn.segment.com fast.appcues.com www.googleanalytics.com www.googleoptimize.com assets.customer.io code.gist.build; connect-src 'self' www.tradingview.com *.candletrader.app *.posthog.com *.shopifycdn.com *.intercom.io *.cryptohopper.com *.cryptohopper.tech *.intercomcdn.com *.myshopify.com *.shopify.com *.cryptohopper.tech *.hotjar.com track-eu.customer.io *.api.gist.build *.cloud.gist.build ws: *.cryptohopper.com *.cryptohopper.tech stats.g.doubleclick.net cdn.paddle.com api.appcues.net fast.appcues.com api.segment.io *.google-analytics.com *.analytics.google.com widget.changelly.com api.cointelegraph.com wchat.freshchat.com *.hotjar.com *.hotjar.io saveload.tradingview.com cdn.plyr.io cdn4.mxpnl.com; img-src 'self' blob: data: *.cryptohopper.com *.cryptohopper.tech www.google.ie *.candletrader.app *.posthog.com *.coingecko.com *.intercomassets.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com cdn.paddle.com cdn.jsdelivr.net img.youtube.com *.giphy.com res.cloudinary.com appleid.apple.com sync.taboola.com widget.changelly.com assets.coingecko.com stats.g.doubleclick.net www.google.nl dsum-sec.casalemedia.com ups.analytics.yahoo.com pixel.advertising.com pixel.rubiconproject.com sync.outbrain.com image2.pubmatic.com ads.yahoo.com trc.taboola.com eb2.3lift.com x.bidswitch.net idsync.rlcdn.com pixel.tapad.com cm.g.doubleclick.net us-u.openx.net assetscdn-wchat.freshchat.com s.adroll.com d.adroll.com ib.adnxs.com cdn-images.mailchimp.com cdn4.mxpnl.com s3.tradingview.com bat.bing.com chart.googleapis.com pbs.twimg.com abs.twimg.com syndication.twitter.com q.stripe.com www.google.com googleads.g.doubleclick.net i.ytimg.com cdn.plyr.io *.google-analytics.com *.analytics.google.com www.facebook.com maxcdn.bootstrapcdn.com www.googletagmanager.com optimize.google.com track-eu.customer.io data:; style-src 'self' 'unsafe-inline' *.cryptohopper.com *.cryptohopper.tech *.candletrader.app *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com fast.appcues.com cdn.paddle.com unpkg.com cdnjs.cloudflare.com widget.changelly.com assetscdn-wchat.freshchat.com wchat.freshchat.com stats.g.doubleclick.net cdn-images.mailchimp.com s3.tradingview.com cdn.plyr.io fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com www.youtube.com optimize.google.com fonts.googleapis.com code.gist.build; font-src 'self' *.cryptohopper.com *.cryptohopper.tech *.candletrader.app *.hotjar.com *.shopifycdn.com *.intercom.io *.intercomcdn.com *.myshopify.com *.shopify.com cdn.paddle.com cdn-images.mailchimp.com widget.changelly.com s3.tradingview.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' static.cryptohopper.com *.candletrader.app *.intercom.io *.posthog.com *.intercom-sheets.com intercom-sheets.com *.intercomcdn.com *.tradingview-widget.com buy.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com create-checkout.paddle.com widget.changelly.com plugin.partners.liquid.com *.hotjar.com cryptohopper.webpush.freshchat.com wchat.freshchat.com js.stripe.com *.sumsub.com renderer.gist.build code.gist.build data: *.cryptohopper.com *.cryptohopper.tech coin360.com coins.gourl.io platform.twitter.com www.emjcd.com cj.dotomi.com www.facebook.com cdn4.mxpnl.com www.youtube.com www.tradingview.com discordapp.com s3.tradingview.com s.tradingview.com googleads.g.doubleclick.net www.google.com www.google.nl optimize.google.com; media-src 'self' blob: *.cryptohopper.com *.cryptohopper.tech *.candletrader.app res.cloudinary.com *.intercom.io *.intercomcdn.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com widget.changelly.com s3.tradingview.com cdn.plyr.io; child-src 'self' *.cryptohopper.com *.candletrader.app *.cryptohopper.tech *.intercom.io *.intercomcdn.com cdn.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com widget.changelly.com plugin.partners.liquid.com www.youtube.com; form-action *;\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: KpgLkD4aDhDJzxRUB8PxDptaZ0o7OHEQ78z7mVTJoWhNBNcMUYbXzg==\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a2911d7e2a9756bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26729,"size_decoded":15852,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (574)","md5":"8499c3b86de4df25542c2f9f78d8a79c","sha1":"3942a2674cb09241e3598eb3d6403e3d2c2b09ff","sha256":"d67aaeb25ce9e34bdc18b2d3ba099086b1c3e5f3cda04edebcb14f826e5a78e4","sha512":"2a7103879757369f94970215e8e1d51255a567118cdefa1147396499dfe093175ddd63b579e790d1df3d4c2dd4ff4043ebeccd917124c6635654adf928d6daba","ssdeep":"768:DPFqnpKxIFoN7jGS9yp8TaA/ME0pwKfID8gXATtIpEmR7/7Scrni6NFDjdmyXRs0:RqnpKxIFoN7jGoaAUEyTOPncyXRsYxuK","tlshash":"54c20919f640b4bb027762aab43f5316326779e676020450a06dd9f17efcd882337f6a","first_seen":"2023-03-08T06:37:48Z","last_seen":"2026-08-10T18:38:37.669341Z","times_seen":684,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":9,"connect":13,"send":0,"wait":584,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/banner/home1/bg.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.936Z","timestamp":1786387081936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/banner/home1/bg.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 736117\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":736117,"size_decoded":736385,"mime_type":"image/png","magic":"PNG image data, 1440 x 812, 8-bit/color RGBA, non-interlaced","md5":"4a265fb97fea6939d17e7a01e39f94d6","sha1":"42cdf51ef7ff162c97b05076e72a68092e4f703b","sha256":"2b9384f97d3382c73bddc679d16d5d4b99200c8b2d9141a68d923f1d0c0df52b","sha512":"e652986d56a315df3615835551ceb388e474ef256ff65e94f9662807418a521eabc60b4445cd49cbee25ca0ce50f23104b7b09ceae28a94665c3e8a3e6aa6387","ssdeep":"12288:SLRv3uOw1TZqWLR/5h67XDShYuCJAmY90NTZVTZ5YWjGAi3TYImouvj83FQubpJu:s3rw1lqwm2TCJAn+NrTjqjmougHHOhP/","tlshash":"11f423b43724bbee50e5b1508e589fde98614c158fc6def3da3c14cd26ac7a8308532a","first_seen":"2024-08-19T14:01:31.618684Z","last_seen":"2026-08-10T18:38:37.670015Z","times_seen":333,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/service/4.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.952Z","timestamp":1786387081952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/service/4.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1804\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1804,"size_decoded":2070,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b19ce2757e73b7b2447079c7d740ccb4","sha1":"1c08f820c379f7ea76a1965e0292acef48873c07","sha256":"5bb7162797d71382e542fc91d527b4eaf113d5b87ca1fa1bff84d167d73a8721","sha512":"c145e71e920e55c05af29cd1bc6ea834c97d993f1116dcf16ec6098fbcd032b0b402989b3799739839912cc78413781fefb0e0cf9d1f75c08942788d7094f3ef","ssdeep":"","tlshash":"41310bdb01e4f18c7b296241e9aa863503d778354017158ac4d90ceaa739c65fc2f7d2","first_seen":"2025-02-26T15:15:16.408571Z","last_seen":"2026-08-10T18:38:37.6707Z","times_seen":355,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:05.188Z","timestamp":1786387085188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Mon, 10 Aug 2026 18:38:05 GMT\r\nage: 2698525\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":1952,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-10T20:36:23.266775Z","times_seen":21209,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/jquery-3.4.1.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.728Z","timestamp":1786387081728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30045\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":88144,"size_decoded":30284,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"f832e36068ab203a3f89b1795480d0d7","sha1":"2115753ca5fb7032aec498db7bb5dca624dbe6be","sha256":"4c24dfd28784ad2befb3dafaac6bf1ed4e7cd58cce713d9a0b228d426e812baf","sha512":"b9dbc08c984ae3c7fd44822ec2e9a22cb8cf7da55fa3975dbbdc3f18fd7e7a7793e8d93604826574e3dd6a4f982d7af4f96c1af5e10d847b8394a34a82c398ba","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"b28319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:24:01Z","last_seen":"2026-08-10T18:38:37.672083Z","times_seen":13124,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/about/home3/5.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.958Z","timestamp":1786387081958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/about/home3/5.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7176\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7176,"size_decoded":7442,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"071203668cb6e9a327d649b67df547ab","sha1":"4ad1678268acce71e657f3b5e6a6b63fee9184cd","sha256":"5469e3f32a7eb6ad01bc124fcf4bc486ae0e8ba324869f2e9c0d2a3fe83df5b4","sha512":"230abd8f81cbdc86c82975073a9444a7c9ef2f80c5aab49743364b1b5c114582751ea2a3b39f398f47dffacd4aeb798455bc90311b6a5b9d4ebd213c6248fb57","ssdeep":"192:iSz5Lm45mamRTmxaNcfIShd9E0fXmBRS1w65/E:9z5dSKIShddYS0","tlshash":"80e19d0448cc3f5eabce982b9a8e5631e0d7f58f4d213e369785242a703e46df81638d","first_seen":"2025-02-26T15:15:16.416217Z","last_seen":"2026-08-10T18:38:37.672791Z","times_seen":261,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/about/home3/2.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.961Z","timestamp":1786387081961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/about/home3/2.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38843\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38843,"size_decoded":39110,"mime_type":"image/png","magic":"PNG image data, 473 x 456, 8-bit colormap, non-interlaced","md5":"916b0b1172b92ce605ad9442bd9106d5","sha1":"f36e1caa2dbbfcb8176e704bc450dd0c076505f4","sha256":"5125578b5b20c928b80f35e4cf94dbced668c94d478079255787842eff1e87ef","sha512":"395371dd7a7c2879d9a080eacb5238658c32c28e529d2e00c14f19ea6b682e7d3d69255fc342815b59bb1b4aa6fba685dc22f87eb3061203ca728f3f67e24851","ssdeep":"768:dN+3VeuU5xH/x/4PH13X2zOFmOLXHQ4JqQggyd1kWpgR8yRsVVWxX:dYVJM94PH13X22L3Q4cQG3kQgR8yRsLy","tlshash":"820301ccb3d37f029ef19e60cf86e696cc48413e5214857bede549953ac63e4660828f","first_seen":"2025-02-26T15:15:16.418637Z","last_seen":"2026-08-10T18:38:37.673483Z","times_seen":287,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.278Z","timestamp":1786387082278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43220\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Aug 2026 09:12:25 GMT\r\nexpires: Mon, 09 Aug 2027 09:12:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120337\r\nlast-modified: Mon, 08 Sep 2025 18:10:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43220,"size_decoded":44033,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43220, version 1.0","md5":"197ad9df561892b41478b747aa2d7998","sha1":"4ed5d7fb0987ff7c4e8163ec45499c9729e49e87","sha256":"dee3a6583f4fa45f0ccb0e1879b50c96639ad59d5e5e6e73ddbe7505be07fe3c","sha512":"00e757f0a9826ecfea7d0c3567be6b5c9d4f15e875429e588b94554083484abcd3e13244215fe34c90fbd0597f9bbf1bf4d61abcf32d6dab1536ed849c9f9d93","ssdeep":"768:HaCng4UVdxLV6SO8Vx7v/4wADi1IvIwOGcDjZjgySPocr61Rjc+6sMAQeqBG:HdgXV1JjADkIvlOfZjJK21Rjc+6sMCqI","tlshash":"0113f2b79522c88e446b25fe76a71781ef8a8dd13b8f04221cbff8d42544741abef158","first_seen":"2025-09-21T11:59:02.801313Z","last_seen":"2026-08-10T18:38:37.67418Z","times_seen":269,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":18,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/webfonts/fa-solid-900.woff2","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.721Z","timestamp":1786387082721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/assets/css/all.min.css\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:01 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149908\r\ndate: Mon, 10 Aug 2026 18:38:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":149908,"size_decoded":150177,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 149908, version 771.256","md5":"44f8148f80e6c3d60fa6425b0cbb862a","sha1":"ec2f4e5f311462dce67b8f354e5bb9a68c12cf58","sha256":"e2c5cf547e2e8d74a17d05c5ad9f1f593ca526452e228124294fa983b908ff82","sha512":"07978f5827f0d5e9191b6970f0a01d10b88e33524c4aa3973d527ace295ee356f907c0374a430785eaabdd1ac06811c841b3da704066044f4d66fa4cc755ec8d","ssdeep":"3072:1q8xfiSXJLOvVpYQgUGUn9bymvMalSSb8S9glCb2XzMZm:A83ZLMVpYKrtPvQRSuzv","tlshash":"b9e312560a90854e7ad8c661360fef0fc28f33ea6ffff2a5e0c1fa8655dc94a2594450","first_seen":"2023-04-07T23:49:37Z","last_seen":"2026-08-10T19:03:35.110076Z","times_seen":3415,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.774Z","timestamp":1786387082774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/javascript\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a2911d835a25569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":657,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-10T20:36:23.269169Z","times_seen":93204,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/2.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.964Z","timestamp":1786387081964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/2.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30729\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":30729,"size_decoded":30996,"mime_type":"image/png","magic":"PNG image data, 243 x 168, 8-bit/color RGBA, non-interlaced","md5":"24f05ed35dc47b5e8628794a541f1047","sha1":"2f8c89609a4ddb71cdefd6443025e5ee0dd143e9","sha256":"c889f85abdf01ac4776e83d920f7778028cc4e83d75522a8f550f9fa427ef2a6","sha512":"b3b9e29a955b9ff57a937ec55d1766a6048c61c6afca5a0c84be7180c02b3a1658e421df93ef91764d3785205ccac6fd5e5af3e647d265428710527487dc908f","ssdeep":"768:QmMUTPLqUcHlhVokqW0zpUlOVUwIQdOHbQ:QmPPL7cHlhXq9SFZMGQ","tlshash":"9bd2e1646142722b207da56587057efcb62f7456bd71e6f8a46380d80edea0438b3ff2","first_seen":"2025-02-26T15:15:16.420751Z","last_seen":"2026-08-10T18:38:37.676375Z","times_seen":311,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.631Z","timestamp":1786387082631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css?family=Roboto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://static.cryptohopper.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 18:38:02 GMT\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5548,"size_decoded":2169,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2f4913b2d4249ba3d87180173c5f9121","sha1":"9bf4027becc81e05db16739d9ea242b37105cd4f","sha256":"ae14e6cdbd03f18a4fa37ba5b905bd7e39ae0162d519ca372985aa209e8c42b2","sha512":"0d96229362f39ed14d6e1f353b1f85a53442f419241cecb63d338d97176202941e8166d253b8a306dd1a6f64ee07f3c5ef40bf48574336c00f2da780a2fd62ac","ssdeep":"96:1OEMNslOEMN3FZKOEMNTOEMNoTOEMNEy+aZjzBrgOEMNfubqGIFuV4yOEMN3ROEi:cNssNzNWNoWNEq5N2bqGIwV4DNINCyNX","tlshash":"dfb11d910417044097835ce227ce7e35fe1f92006185d0b5ebfc9b6bedebda652a836e","first_seen":"2026-02-19T23:02:43.131523Z","last_seen":"2026-08-10T20:23:07.093362Z","times_seen":12631,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb1.tawk.to/s/?k=6a7a1a8be1c8abc22d39eb3b\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTVlZWRhMDY0MmVhMTFkNDkwZjE2MTkiLCJ2aWQiOiI2YTVlZWRhMDY0MmVhMTFkNDkwZjE2MTktUGhaalJ1bEFfNFJYbWR1QXRDYnFHIiwic2lkIjoiNmE3YTFhOGJlMWM4YWJjMjJkMzllYjNiIiwiaWF0IjoxNzg2Mzg3MDgzLCJleHAiOjE3ODYzODg4ODMsImp0aSI6Im01Z0tRVXpuR0M0cUl0NVUyTFRhQiJ9.xLk9KR02-OEVFqwbarlJIGiLoJhS6toRkcb82RmrXAviB5OgViPPxqCwiNIFwZf3drsk6FHGHzkwuU9alnM_Yw\u0026EIO=3\u0026transport=websocket\u0026__t=P_izx5o","fqdn":"vsb1.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.664Z","timestamp":1786387083664,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /s/?k=6a7a1a8be1c8abc22d39eb3b\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTVlZWRhMDY0MmVhMTFkNDkwZjE2MTkiLCJ2aWQiOiI2YTVlZWRhMDY0MmVhMTFkNDkwZjE2MTktUGhaalJ1bEFfNFJYbWR1QXRDYnFHIiwic2lkIjoiNmE3YTFhOGJlMWM4YWJjMjJkMzllYjNiIiwiaWF0IjoxNzg2Mzg3MDgzLCJleHAiOjE3ODYzODg4ODMsImp0aSI6Im01Z0tRVXpuR0M0cUl0NVUyTFRhQiJ9.xLk9KR02-OEVFqwbarlJIGiLoJhS6toRkcb82RmrXAviB5OgViPPxqCwiNIFwZf3drsk6FHGHzkwuU9alnM_Yw\u0026EIO=3\u0026transport=websocket\u0026__t=P_izx5o HTTP/1.1\r\nHost: vsb1.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://oroviento.pro\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: K7LN0ihgisvYIplYpw7m+A==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 10 Aug 2026 18:38:04 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: OHSqgDGrzCQBjUsHGjN1eQkZt+M=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a2911d8908212efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":17,"connect":14,"send":0,"wait":604,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/css/all.min.css","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.714Z","timestamp":1786387081714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/css/all.min.css HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 17:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21835\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":102025,"size_decoded":22146,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"2fd961571c270c2d63b165a97488fe95","sha1":"8922f78fc464d96eafb41f27916e97b9a12f5e37","sha256":"ff8510712984ac3ccf08c022b8e8963d556c34ddacdd963f36c99735c8f42057","sha512":"4b396bc56525a5fbb343ea5c502a2cc5c825411340abf0d98d5b02d25138d31b000ec7de428132a44f9e9f070e8868e4fdb4ae1862871328d2a10d73562b1a9d","ssdeep":"1536:hwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:d709gMGFiyPGuZpfZCl","tlshash":"2fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-05T16:51:19Z","last_seen":"2026-08-10T19:03:35.115511Z","times_seen":4794,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/partner/light/3.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.943Z","timestamp":1786387081943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/partner/light/3.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1905\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1905,"size_decoded":2171,"mime_type":"image/png","magic":"PNG image data, 122 x 48, 8-bit/color RGBA, non-interlaced","md5":"cea520daadf761609621f409f78db1a5","sha1":"917d218d81c4d19f8c27fc204a0a1d0d60318c3f","sha256":"127093749ecbe41142ceafeef44f127556224bfed629d4d82ca865a5eff4a91a","sha512":"0080f6d11e314f046615d206a0f1bc63958eaeb791b4458aaac552fdd6dd6d6127abeb7619955b2319b66fd4613bc699aa2e4e6aca64a4c4ee80740032cd5c5f","ssdeep":"","tlshash":"904119de49ee95bc961b60530d481cab3c07ef5e0c1178d4ce874b37794e743b881a81","first_seen":"2025-02-26T15:15:16.400774Z","last_seen":"2026-08-10T18:38:37.679309Z","times_seen":278,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/service/2.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.949Z","timestamp":1786387081949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/service/2.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 850\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":850,"size_decoded":1115,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5d09f0b6cdb1624bc76992a6b5281f0f","sha1":"3a95f079c3e6a7ebc2403114753c922b9762ce80","sha256":"3a83502d2ddfdb36e1e299f47e6803de2a0ab46a52089b23388582e544cd2be4","sha512":"dac4a9a7c9690e0bbb55b7e9ad3204121482bb867e2fb6064c490bbe057ae4dc062fe41cc22c4e08e279d35221e11366c35eccb8d3362c095c465c23207970f4","ssdeep":"","tlshash":"250196ef7b3884788aad8ef816cc5c1308ab44ff082d06cc10898108bb26e504d8add3","first_seen":"2025-02-26T15:15:16.412094Z","last_seen":"2026-08-10T18:38:37.68023Z","times_seen":358,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.631Z","timestamp":1786387083631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"4b5959d6bb3f8eab88199e8866ea2cf9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88a8eb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":5825,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"4b5959d6bb3f8eab88199e8866ea2cf9","sha1":"73e1c0cfe7002f418432f21908ec8dce2a36416a","sha256":"1fdc4d7762864f58676dc7455dc12a49cc208e9845718e8311ff2b3c972e6340","sha512":"478be658469412ad258dd7b84ea4b9530e10df41afe26e9f5a0089d40997d930a900075d05705e06aec798a5a9dc62cd98a578f5fe0984aaede8646e01098683","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCCGN//h6LiJq:SzP2DASLi8","tlshash":"fa822ba6f149311bc925c751605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-08-10T04:46:44.637387Z","last_seen":"2026-08-10T20:36:23.318569Z","times_seen":106,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.635Z","timestamp":1786387083635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"41ab8f218022051b946ab0c328bcb874\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49830\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88b8ec2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11888,"size_decoded":4540,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"41ab8f218022051b946ab0c328bcb874","sha1":"23c1db81fbab62e43fa998b96de90a56de7e5cc3","sha256":"42dd6e6f77cad47e6ac90a5e4955d890f3bb3572285edbbbac177e210d0726af","sha512":"bf0f43b4456a332c3c09bb9f878dc6a11a26a2a6fba3b6869920ffb3c753e46ad7bf6fffe72382770c57167a96981d2a387cb4eb2dd64abaf285dd8965b155c9","ssdeep":"192:0H9MaxRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kxb9HkS316xAFKpLZEh","tlshash":"7832a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-08-10T04:59:35.697858Z","last_seen":"2026-08-10T20:36:23.275539Z","times_seen":44,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/css/toastr.css","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.713Z","timestamp":1786387081713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/css/toastr.css HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 17:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2877\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7574,"size_decoded":3187,"mime_type":"text/css","magic":"ASCII text, with very long lines (821)","md5":"5f96ac3efcdfacd9fe9c91fb26a09666","sha1":"5f8ffd4d3bd513cfc47b81ee2556ae12b55f5c52","sha256":"3dd76a7ac87c9d0546ddb55f4763bc03770780aa053a6223fac74698aefb52e4","sha512":"ff1a4ce555764e11a9e21c190aee71db4058714121e51ff44ad3525055202c7375d79fe2b19f26cbe7cf8cae18a27c2c1a62aada4249b89e2fb17f79d53493da","ssdeep":"96:qa7hh4QdQXqrB4KkKX66thIiobmQTWQ78GhJZCjtC8TWP+zLmlDDxTWKG8CzyoS7:N2qrBb66t5zY8sywttMGqVMv","tlshash":"bdf166259bd22608bdc5406db51926072b2aa003d6ddecb96ddfa16cefc7bd0dc71344","first_seen":"2023-07-23T13:47:16Z","last_seen":"2026-08-10T18:38:37.682956Z","times_seen":334,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/about/home3/check.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.960Z","timestamp":1786387081960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/about/home3/check.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 690\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":690,"size_decoded":955,"mime_type":"image/png","magic":"PNG image data, 33 x 32, 8-bit/color RGBA, non-interlaced","md5":"715d244f350051b1e4a6768ee7cbb968","sha1":"503a40ce5968f6a243e1a27aab671244ba4e25d5","sha256":"02c9a14ac2b62b78680a5e3b1f38fd80d71c3cd21835b6987f22d4e9fdccedc9","sha512":"a9a5c926811512f92f0fff09f78a051d98f8cae214975cfc2998b7d9ace1c449f0fed31639cdb6d6f2f60a708b814a7f1b18aeed5a6f8b74071bea90a8acdb9f","ssdeep":"","tlshash":"510144cdfd3a9d9d7c3a0cb40203637a5811712985415cac2577b4aef804ed0dd83281","first_seen":"2025-02-26T15:15:16.415146Z","last_seen":"2026-08-10T18:38:37.683746Z","times_seen":307,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.878Z","timestamp":1786387082878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oroviento.pro/\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 10 Aug 2026 04:42:12 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d83fa33569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":4369,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-10T20:36:23.281757Z","times_seen":29032,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/68480/small/figure.png?1755863954","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.933Z","timestamp":1786387082933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/68480/small/figure.png?1755863954 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: LCIwVLh53Pu9akMHtD1Je8HabGm+jjxbYVGxs9B5UW+Q44JfFgtlUVNUZBKJYFfvKVu4Bf+BKPk=\r\nx-amz-request-id: THR1H69RM34N3Q76\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 22 Aug 2025 11:59:17 GMT\r\netag: \"fdbde50da0728ccb40571e2fd459b2d5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: pudbJbaAOTjdknaPZWCjW64LHM9_grOf\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULg5XETJ7ltNpkI395Jkn6GQiSIxnt7VAi%2Fk1UQAl0vyutRQpdZHhAHdduU8R%2BMC3GStHg1l6in4i48MgLcmftnu5tco6WhBx%2BDbx1yshEhpIZb93%2FgeLJtfElgD67WaJza9KakzzZQzOM2Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d845eae0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 667\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":667,"size_decoded":1616,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"fdbde50da0728ccb40571e2fd459b2d5","sha1":"ac5f7dc43a90091fd39192051701c8b09d7887f9","sha256":"2a21db9702389f87a0ba074451da31385c3914bf9bd370c27a06bbde76a964fc","sha512":"a12167e5638e6b5aa6ea4f37d7cd3aaddeab6eb34873ac4599d344d33c852340e3cf8d42519e3e40092bbc79ef48742e5e673392945ad2d681c13c2bf389e7d1","ssdeep":"","tlshash":"d101836355d30819e595397c106204747ff1d2722b26ebad8dfef11985087d549d0322","first_seen":"2025-09-07T19:05:40.232209Z","last_seen":"2026-08-10T18:38:37.68547Z","times_seen":214,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/100/small/fmpFRHHQ_400x400.jpg?1735231350","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.991Z","timestamp":1786387082991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/100/small/fmpFRHHQ_400x400.jpg?1735231350 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 5rSuykLyjwDMzo/r3Kno+8jm8aIX6ktyLOXQjuJLx+Wt0kw6EtEnNbTJmQb4AouY0/aYkBf7l7n58FAswLrrAGsvehA1sSF7\r\nx-amz-request-id: QPEQDWM6GCBYR9T3\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Thu, 26 Dec 2024 16:42:33 GMT\r\netag: \"a5298852872129489c639c3242a50291\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Bn1cPHXEu3cEJWlOwv0FlUiyChPUnHoW\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3164\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Frgej%2Bxkw28UM31YfvspcdGyh8bceYZZqQGfNVg7JXDILttYvybrGEareqUotOOiCspeHPjRBzdvEW5r4sbh9vYEEloxNaA3Flk6f5%2BDpXQY4WWetBSzOunuXBy5LraOiISoyTZYh08SouWb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d84aebf0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1770,"size_decoded":2737,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"a5298852872129489c639c3242a50291","sha1":"3741174eb2d60180696e3cd7d13f82cae9f23308","sha256":"099e0c36b351c16628c272ecc1ea46d945827d85011c6b8faf7f6a5ed83e33c4","sha512":"ea83312b84e09cd13eaa7c9b86d7bcf8e4ddfdb90e0153346ff420a82ecd3bd98f4792e69bd912a3fd443c9e2bc06b674dd5cb5060cc6248a8678e844bc3aca4","ssdeep":"","tlshash":"2931b769236cdb09d51f1934b1d0cfd4c36bbe25add7d34ec18015297b3a5c14918d49","first_seen":"2025-01-21T17:43:41.326736Z","last_seen":"2026-08-10T18:38:37.686242Z","times_seen":298,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.280Z","timestamp":1786387082280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43220\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Aug 2026 09:12:25 GMT\r\nexpires: Mon, 09 Aug 2027 09:12:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120337\r\nlast-modified: Mon, 08 Sep 2025 18:10:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43220,"size_decoded":44033,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43220, version 1.0","md5":"197ad9df561892b41478b747aa2d7998","sha1":"4ed5d7fb0987ff7c4e8163ec45499c9729e49e87","sha256":"dee3a6583f4fa45f0ccb0e1879b50c96639ad59d5e5e6e73ddbe7505be07fe3c","sha512":"00e757f0a9826ecfea7d0c3567be6b5c9d4f15e875429e588b94554083484abcd3e13244215fe34c90fbd0597f9bbf1bf4d61abcf32d6dab1536ed849c9f9d93","ssdeep":"768:HaCng4UVdxLV6SO8Vx7v/4wADi1IvIwOGcDjZjgySPocr61Rjc+6sMAQeqBG:HdgXV1JjADkIvlOfZjJK21Rjc+6sMCqI","tlshash":"0113f2b79522c88e446b25fe76a71781ef8a8dd13b8f04221cbff8d42544741abef158","first_seen":"2025-09-21T11:59:02.801313Z","last_seen":"2026-08-10T18:38:37.67418Z","times_seen":269,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":21,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/small/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.906Z","timestamp":1786387082906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: JDVX7GafLWmEkDWZROKb2dWwUKsUF47ujfYncqPUiYTLoqnKdGk9PEBbk4yQUH2gycyn1/g2UEV5wkckmMDFQGdfS32bO+xG\r\nx-amz-request-id: 0G16G803EXM7PSG4\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DFYA3dyYowE3V7QZyNQq.2yD..TzK7c_\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6733\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4wygvtBVkMh2e8oX7BvURcjguKq0oTWr5gYNeeL7lH1Z2OtJTEyCkDlaiZybb4j%2BnNeFKyqr2Or%2FPtmVLMwD2upWmgWh0sYShy%2BMs%2FnSBVBNgZgW3%2FAwcFPD57pP45p3%2FEdCTU0P9QjsRfO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d843ea40b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1887\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1887,"size_decoded":2863,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"19758c6da516f95d9fad2a210c525ee7","sha1":"85a15edb10e5a58b2355faa8d54224e400faf5ec","sha256":"b1e625a6fa52c6d465bbcd0b311a4c7d54efc8c1c66da2d8f9d34a3cfb5d417b","sha512":"6074df196b5f6683e23183b4048815ec25b220f19ffeb11c4bd599ea1fe149508b220a5acd72c7717ca6f44247b4a4d1126d6499604a18cc8e412b4ca3a6bfc9","ssdeep":"","tlshash":"f4411b8dc4536b99cc2f1b751c3478bb95f8570518dd3e64da80da18c40fccb6214445","first_seen":"2024-09-11T20:05:16Z","last_seen":"2026-08-10T18:38:37.687062Z","times_seen":515,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/8418/small/leo-token.png?1696508607","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.942Z","timestamp":1786387082942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/8418/small/leo-token.png?1696508607 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: jN3lDIwjh7re+IQaivIrp4DLXIZFuLCLMDlk/Uu8eGphG0rNPP/1HDmdiMUOIMbcNhZtY8KuU5g=\r\nx-amz-request-id: Z7MJP1DBNZGDCENE\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 03:03:07 GMT\r\netag: \"12e75a12a7250349702c451c5bbb77a9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: fT6H7sE8Zt0Uvtic40oguM2ZsyJwQiSu\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3165\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqTivNTgTaFgZBoW3nK3bzA1nFKl4BjLAyPUthPM0NYOTMCnhG0zhoVZVLs8uS7YFaDh6nQyicpcJ4J8p56oFelYLqjADBAvMhdBhXg1jz66ShWOT3IjBOZldmpQ5mkSfIvlXEq5ktZVQp%2FZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d845eb40b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4181\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4181,"size_decoded":5127,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"12e75a12a7250349702c451c5bbb77a9","sha1":"3c20d6f74f58fbd039b047dfcd4e1c3e470407e5","sha256":"1383ddea08e6382a1eefa22aaf9212eef430cd400393bfd9354d457a81e05730","sha512":"572a51949d092b5e6ea1ff608243b53f81f7a23f1a2d7f6ca96f518bc8b64fea9e2d4861ccc7b865cde07fae5119d5735150d2dfdf5ba494f14ec587264c0e37","ssdeep":"96:NinlDeSuOOVDvR5R+YObyRHDpDGPjF/kIHyLo20g2UN:NinllKVDJT+rydDwx/kIHGo20g","tlshash":"57816c4980b48738ec472d4076b27cb1cc54c2693343aeb64bd4e979fef1a56c756042","first_seen":"2024-12-22T02:31:25.261559Z","last_seen":"2026-08-10T18:38:37.688072Z","times_seen":207,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.755Z","timestamp":1786387083755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: W/\"925762835a22535d27cfba0dd86fbd65\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981984\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d8979202efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5625,"size_decoded":2952,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"925762835a22535d27cfba0dd86fbd65","sha1":"4182f4539a1806e6a2d3598bc3245ec37fa04d4b","sha256":"040d95332bbc39711ac943d5785b2dcdedd4cd50b14bf9166d8d06c08946709a","sha512":"38117dbc7629d2139d9aadd7a9a942e7d27eb40eb9dabe28ca92f7c75188ff1e69d2e0a51f7f1389622aa05243206c1f3c9ae9abed2925b4a1ba409b8e34e9bd","ssdeep":"96:/7r1pNDHenr1pNDHeVnGeRKVrNxdIJJUIH1G99/FFM821NakdCcO625W6198rhXM:zrZzOrZz2nm8J2Wa9/Fu1UkdcAu2rBI","tlshash":"a6c16c7d8390c3f8edd6cabcdf6350b4908ed4aed1e5c36592a8c5a061e24e8f34d495","first_seen":"2023-05-11T15:12:37Z","last_seen":"2026-08-10T19:59:08.426216Z","times_seen":463,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.779Z","timestamp":1786387082779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"5cd2a28d244176c3116c742510b8106b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d835a29569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":1761,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"5cd2a28d244176c3116c742510b8106b","sha1":"e946422d4669dd8765bec11fd114bf6158e755ae","sha256":"10b77df9d6236b02a643b1953dd551529fe8c6f75d5c1e9efb590889360d1746","sha512":"c0a5e47d1bd48d05ad464f872ad5ecd240a3c1f11e62520a2685bbb931e91cbb843cb06f73d86193124fa4869a4c8b0e6024ef0a3980e0903cbc6bcfff261465","ssdeep":"","tlshash":"3c4183d936e8f9ba434318a1043f9026f635397a097be4c0531dd4f5bc78c89815afb6","first_seen":"2026-08-10T04:46:44.489478Z","last_seen":"2026-08-10T20:36:23.284722Z","times_seen":113,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6a5eeda0642ea11d490f1619\u0026widgetId=1ju1d0fki\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.870Z","timestamp":1786387082870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6a5eeda0642ea11d490f1619\u0026widgetId=1ju1d0fki\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oroviento.pro/\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-x8ts\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-15-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a2911d83fa31569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3283,"size_decoded":2009,"mime_type":"application/json","magic":"JSON text data","md5":"dff3a62f2192c7f5d89dd451bd84d1fc","sha1":"faa529d0da6fbc4f1cdd4e6f2ce5af769f24016d","sha256":"fb0150232c04601d31e9359170cd0b805d2973103722e02e582d9afc95263d8e","sha512":"c309715153abf47a854972644a9b02c1948ad072ae41c1fbf2893f104072f543e05ca665007d0b97013730e837e0bab4c26095608db643951bd51f8e7e993461","ssdeep":"","tlshash":"6461332a5d19dd7593c98243a1de3a17b53dd422e384190de0986d39c3ebacc221174b","first_seen":"2026-08-10T18:16:28.254336Z","last_seen":"2026-08-10T18:38:37.691138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":4,"dns":3,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/icon/moon.svg","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.933Z","timestamp":1786387081933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/icon/moon.svg HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 312\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":520,"size_decoded":626,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11cfba1dcca7b3550cdc0e13def7bcf7","sha1":"11be046676483d5d5e44469dd2e8655862c0b67a","sha256":"9d08b89da870e467d9de2340a211792da2b1f6c768bba831d861bb1f5a90ca30","sha512":"f4df34184c873710bd39845a771bc6e58dbe1f9d20e2cb25a096277e300b133ff3056f904f5574486b528dd52833e13a5b6206adb854869378fc1d502355a9f7","ssdeep":"","tlshash":"bbf0c059c75080a85fd063d2bd6c9a34642a209b6c58054cc479d4a41062b5bb030eac","first_seen":"2024-08-19T14:01:31.572073Z","last_seen":"2026-08-10T18:38:37.692823Z","times_seen":373,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/banner/home1/3.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.937Z","timestamp":1786387081937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/banner/home1/3.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5274\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5274,"size_decoded":5540,"mime_type":"image/png","magic":"PNG image data, 110 x 102, 8-bit/color RGBA, non-interlaced","md5":"dcea831908fdf647910f17bc15f302c0","sha1":"a9c6edf53c2e9eb2948646898eae47f6c6e4e5d9","sha256":"b1617bcf850fb6d09b7b4aed06a8f418b8dbc40dfa696b513a90c0e5804f2482","sha512":"92fec1ea9e53c59bc55789eb4a4c9857cb4c777040fca41696b95f4079d9e2398b6886fbbd1732193285f955a7062556a3dda6b8f386e339be42abd2d6d556b0","ssdeep":"96:hSu7+ja6XOu3aGeaJEMECAVqIDnwa4SRhhcWJaw8w1uwyicE:hSrjF9tLJEMECAVqI1d8KuxicE","tlshash":"51b19da2d75207884e08fd1a05415a93e10fefe6600e680d6477e13bba7783603d9ebb","first_seen":"2024-06-17T17:48:48Z","last_seen":"2026-08-10T18:38:37.693715Z","times_seen":367,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/service/6.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.954Z","timestamp":1786387081954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/service/6.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2548\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2548,"size_decoded":2814,"mime_type":"image/png","magic":"PNG image data, 48 x 47, 8-bit/color RGBA, non-interlaced","md5":"e981d3c1ee0c3674923f43718c867ebd","sha1":"47ab1e8dc2acfa06718168fb508f83440192d938","sha256":"44234d442c7b59b60ab0612d5acae2e511fbf8b054892e50422f8e91d07d71a3","sha512":"9cfeaae26d2310e5300c2cdbce509fc4715ea2349c0df40c4e366b4670f1292346fa71e92af48cb8cd24017c417557c3526b6d5b60df616f5b0f0a5a244f507c","ssdeep":"","tlshash":"0b515ccbcc40623cf7c718b3daa574a3d8a1be34fb56b41b3b444ac1ce350a28920726","first_seen":"2025-02-26T15:15:16.409527Z","last_seen":"2026-08-10T18:38:37.694512Z","times_seen":351,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.640Z","timestamp":1786387083640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"0b7571445a752df762894d31268e7c12\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88b8f22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54211,"size_decoded":14820,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54092)","md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-10T20:36:23.314214Z","times_seen":3121,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.721Z","timestamp":1786387083721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d8939122efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":12895,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-10T20:36:23.310437Z","times_seen":33960,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/swiper-bundle.min.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.732Z","timestamp":1786387081732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/swiper-bundle.min.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38156\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":143706,"size_decoded":38395,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-08-10T18:38:37.696837Z","times_seen":14967,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/fslightbox.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.737Z","timestamp":1786387081737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/fslightbox.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9120\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":30524,"size_decoded":9358,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30524), with no line terminators","md5":"5bcb8b6014f33fc9b76d313137f93c8c","sha1":"167b1e36379227a2fa7c635269bdcb0ed8dec4c0","sha256":"77ba0f0971a262f3fe1999d37208a8a7ffa1f2e563d4437bd03b1866a2219749","sha512":"8eb611d5c1bbc30ab697eb8d1fe5d7175f218cdfa3f0c0633363cadbe7d5fe70081cac6aa60e3bf6b39614ec53a429f23cc65e1808be7830311f2af34f393246","ssdeep":"768:x1g+tzeuLaIUfh7VOXqqI09lgHZQLaTVzrpGrav4diKk1CAw5S+EXMm6u:x11tzeuLaIUfh7VOXqqI0XgHZUaTVnpp","tlshash":"50d2f76a7724353881cf119fa06fdb0f237650a2ec0f6445d51ed8e5acb6c6a02a7f8d","first_seen":"2023-08-06T16:50:10Z","last_seen":"2026-08-10T18:38:37.697566Z","times_seen":1356,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/custom.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.927Z","timestamp":1786387081927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2391\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11212,"size_decoded":2629,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"8adda41789a33dcdcecba4f0f498b786","sha1":"584f54be52b3f1435c4596de8fcfffe150285da6","sha256":"2f2f54be4c4ad3f6b5d16bcb89623e367ce03624ebf26ceb82476567633d51a9","sha512":"d838ee08db5de68a1e839d697ffe733014d40a49e6921719888eade3a05848f6583fd3dd1955cb0c3015d9fa05cdaaa3638168c296c4e7e6f83fd551201255aa","ssdeep":"192:cYZMn4UyWe1yDMAtS2NjmM0dicieym8GHm+dgfqzfsweGQQrvZm:cYZMnrvK+MAj90dicizMgC5rQQrRm","tlshash":"4932631498751032007b717bdd9f5380b2b36047a9acbe31789e85484fa8b7e52fa7f9","first_seen":"2025-02-26T15:15:16.438731Z","last_seen":"2026-08-10T18:38:37.698214Z","times_seen":272,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/about/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.946Z","timestamp":1786387081946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/about/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35820\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":35820,"size_decoded":36087,"mime_type":"image/png","magic":"PNG image data, 630 x 687, 8-bit colormap, non-interlaced","md5":"59af36c4eb4e0198c84bbbfdcef5fb02","sha1":"bdd2d5f2bf24033368a6cfd8a33fe0967eba03cb","sha256":"454605f320861b8ddd3bf915ab4dfcff88e6fa33d8ab9727173b79946d8e8834","sha512":"75095e537dc22306dc945a99cdc13ebfe576652860ac00e2fb8a17a2103e7dcc9761905b0bf77afe79e0b0c73c3c80451acade2178609a428436ce1555d18dc7","ssdeep":"768:hB7zxfyBRB3/8s1UmyOFP5hpk6rbCDntlGiHMZiItKXfK:htyz/80Um5dk7tlvsZvqi","tlshash":"83f2e1c3eca1c409f56a05f6a57910d2fbcac0aa0b1617656f098f464f4719b8fa7e83","first_seen":"2024-08-19T14:01:31.623349Z","last_seen":"2026-08-10T18:38:37.698856Z","times_seen":324,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/images/logo/logo-circle.svg","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.000Z","timestamp":1786387083000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:21:27 GMT","end":"Mon, 26 Oct 2026 08:21:11 GMT"},"fingerprint":{"sha1":"07:05:30:82:57:E3:B8:BD:49:2F:74:83:02:E5:40:11:01:83:1A:33","sha256":"B5:84:A9:E6:B9:9B:98:0E:3D:7F:76:DE:8F:28:1F:81:BA:BD:75:92:81:CB:FA:9B:87:E2:50:EC:D3:5A:42:75"}}},"request":{"raw":"GET /images/logo/logo-circle.svg HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: widgets_csrf_cookie_name=37695d9f26c25337fb58093458ea928e; ci_session=tnh5onqqcaj39jallo77r9j6aqkvc806\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 11 Aug 2020 21:02:47 GMT\r\netag: W/\"1b339b8c2b7735f5276f7558e5d6bfd4\"\r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b3fa44f24855583147e402819cdc6b70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: mGPyWQGo_pCKmlcHyH9H28FPyqSaJsI3leyTlAPn7jzAuxF1RenwyA==\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nage: 5650\r\ncache-control: max-age=14400\r\ncf-ray: a2911d84baeb56bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":360,"size_decoded":1120,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b339b8c2b7735f5276f7558e5d6bfd4","sha1":"e93a262add5eb370050bc1e48c0fdb1eec6296bc","sha256":"98a0c776a71a6507752dc3918770f94fcee7c2cb2f544ef134dbc37b58bf63c6","sha512":"d402328f506eec67de960dac15c4063a9a7b4d78e20192cdd71e777c449d02071b670ddc869020ecff9d898df1d0c60cac3c57893a56aeb6ebaad9301961281b","ssdeep":"","tlshash":"cde092a9808c445c493bcb20e2b86881d71ed1a2a397096af95c35266f32589d48b144","first_seen":"2025-05-05T14:49:57.799041Z","last_seen":"2026-08-10T18:38:37.699735Z","times_seen":341,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/3.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.965Z","timestamp":1786387081965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/3.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29584\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29584,"size_decoded":29851,"mime_type":"image/png","magic":"PNG image data, 243 x 168, 8-bit/color RGBA, non-interlaced","md5":"3a4bb2ce66a6ac3ea0b8be18153af498","sha1":"29092b484ac0b23ceae4cef1cbde0dca2008d0da","sha256":"527b2be249cecca7dcb319a280be01bfb2ba87b1d53ef2d80a0c1513818700a8","sha512":"62ca1c9c1d2e1a1a144d12196b1b8ed3e532faacbe478c9ce60bbe1899bca5ae060bff343177521b4e00b0bb142717acd87c21ea03b99e064e6aab4b024e456b","ssdeep":"768:LOkRaFKXgxweKmrt9mp3C1xiBOzXa1fxdhTQFhQcCw5:raRKqXm01xiBOzXa1tkFhCQ","tlshash":"d2d2f2a81cc9c4b5b3ee5012cb64356ad3b1414a1ef336295a73687e3789e8fe702172","first_seen":"2025-02-26T15:15:16.423848Z","last_seen":"2026-08-10T18:38:37.700531Z","times_seen":311,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/footer/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.974Z","timestamp":1786387081974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/footer/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3357\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3357,"size_decoded":3623,"mime_type":"image/png","magic":"PNG image data, 81 x 40, 8-bit/color RGBA, non-interlaced","md5":"c2b641fd2b21f7fa840aee149c99e362","sha1":"0f0db5102fc98c9fe0b1a5c616f722c50d6d1f4d","sha256":"5312b2728edeb68ba72a4a61bbc704383b2d3841f04acf921455994ec52124ea","sha512":"cc4eb04a170a1171ad5ed11cba18e7255e39c6a5ce63e9edbb796015c4c5a4159b015a7575933c731b71e3b5d2687a037af74bd0ee7c9299787abd0530daa21c","ssdeep":"","tlshash":"87615e1e820a45b8b5f26a0f45f35272e8f56afd1fd42b253928c40fd720a60875d6bf","first_seen":"2024-06-30T06:52:28Z","last_seen":"2026-08-10T18:38:37.701726Z","times_seen":406,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.636Z","timestamp":1786387083636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88b8ed2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":2975,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-10T20:36:23.306128Z","times_seen":42256,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.639Z","timestamp":1786387083639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88b8f02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":1080,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-10T20:36:23.300392Z","times_seen":49854,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/css/swiper-bundle.min.css","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.716Z","timestamp":1786387081716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/css/swiper-bundle.min.css HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 17:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4257\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16493,"size_decoded":4567,"mime_type":"text/css","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-08-10T18:38:37.704365Z","times_seen":12675,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/5.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.970Z","timestamp":1786387081970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/5.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6327\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6327,"size_decoded":6593,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"ecc8630cef654bb2b0581c11248027cf","sha1":"2284bcf5151ed7f14bacd9e891d6dab7ab2449fc","sha256":"c2ac331d839c1423573f6518e8e2c676a07cfbc7678f9dfd5957002fce76448a","sha512":"b8d259129bd8b0c1a067361178fd8418954f53f66ad918abfea27028c2be8553933be165d82a3d14e66c45cec694779507678150aa758b3c1f0e354c927fb42e","ssdeep":"192:bSEY+Mfl22Kof/gO5QJaATJRUeybcZR21UtR:OBJl22bfoyQJa6JRFrZR2OtR","tlshash":"8fd19ec2c809ad89c3aa8b9447bf0533b95cb4bc06c574a7e9d87808e164c50ea8e7e1","first_seen":"2024-08-19T18:45:28.761687Z","last_seen":"2026-08-10T18:38:37.704983Z","times_seen":319,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/39926/small/usds.webp?1726666683","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.939Z","timestamp":1786387082939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/39926/small/usds.webp?1726666683 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: p0/GNAiBYMre1Q4sUMK9hVNHz24zcK9g47Qo1DYO0EXLfOND5QpBkhi/MX0GdmD4PrSh6Gx10sA=\r\nx-amz-request-id: WVD0EK1TSW9CP6V0\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 18 Sep 2024 13:38:06 GMT\r\netag: \"64c7871a57e51628d41cc802fd098cfc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HqD5pBxBstUJ_qNLlBy3VtdPef7KZKUW\r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3165\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQwZy%2BM8XSkFYVbUjjYkuDmw2p1SKEQK9H65iX0iOAw%2FBZ9Vwfpv0JkSEbtcUmohXTdeyS1kQ5Z2nSKoKmMqobIkKx5ehFyZFas5y73vxbiVz2Oa8EMi7NC7ELIybYMsRtXkRYmYBkhsi40r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d845eb20b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2734\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2734,"size_decoded":3681,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64c7871a57e51628d41cc802fd098cfc","sha1":"338d5ee95934b582677defe6da62ba91ed37a83c","sha256":"8d76bbdb9e9dcf65f5d755d0ef3c8f78c35ded636342d2fed0e2b70b36caf500","sha512":"ba34402558063304d03de68cf1f934ba1faf472752af4060eaa3455a721a24602b5594db3527b8ba676d4cca95d63eef74e02e848b98feae638f3ade789eef17","ssdeep":"","tlshash":"ba518e17f179a400f0dd425f160ba58748c29e5700e1f419fbe08da0026838f82b9d7a","first_seen":"2025-03-04T10:27:02.929813Z","last_seen":"2026-08-10T18:38:37.705516Z","times_seen":215,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.629Z","timestamp":1786387083629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"8c2091a992e4303600967e53388cb5c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88a8e72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10918,"size_decoded":3754,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10918), with no line terminators","md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-10T20:36:23.276278Z","times_seen":14128,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/banner/home1/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.939Z","timestamp":1786387081939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/banner/home1/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74601\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":74601,"size_decoded":74868,"mime_type":"image/png","magic":"PNG image data, 743 x 715, 8-bit colormap, non-interlaced","md5":"f86dd8222a43d7e15292b87e8814bc9e","sha1":"135f4f1d17cc559e54bba0b248c7d11dac55f8b6","sha256":"90459ff77699243b0477928582c91c6f8447ef40553e9fdc6a52f46b304533bc","sha512":"5b07918ca428d81484069fe535d935b95adf131081864e0f9a9d76bc7ea342c7105c684b75e79ff31bb6e11631a4ec02a72b7fac9c3973e359dd60c853621661","ssdeep":"1536:orV9m0kqWTqN+bbylR/Tx1VfRCCo4aab+cedvI0Sz3ZnfRwPr:oXmfqNUbylRLjVQCvb+JdI0Sz3Rfir","tlshash":"1a731257910eb679e904983ea3c888838572b98a57f59b0b0f2dc7177e17081beed1d3","first_seen":"2025-02-26T15:15:16.402534Z","last_seen":"2026-08-10T18:38:37.706604Z","times_seen":306,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/service/5.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.953Z","timestamp":1786387081953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/service/5.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1195\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1195,"size_decoded":1461,"mime_type":"image/png","magic":"PNG image data, 48 x 44, 8-bit/color RGBA, non-interlaced","md5":"5118ddf09911fb7aae75d78725221c3c","sha1":"cbe51c456e7d0e024ac76079ca4a85bedf606324","sha256":"210dfb468602516000b577508bd0317a74add53a844aeeaad9e25aa210d0f20e","sha512":"5076ebfbde2e6732e8522ba0e6fe7d2bb1499483f1443ee1c98e006ba6480dc3177a7d4a029d08f095b2c79982536cfe7ce06eab4283c033d224b8c7e34f55fb","ssdeep":"","tlshash":"7421daf70df9f7fe0f48b9496f8b05e0949ed998d81a4310bd54755f092388d4974714","first_seen":"2025-02-26T15:15:16.41312Z","last_seen":"2026-08-10T18:38:37.706951Z","times_seen":356,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/325/small/Tether.png?1696501661","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.910Z","timestamp":1786387082910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/325/small/Tether.png?1696501661 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 82epN+h7J2TV5fDVxVq/lOvv9LmDN+A+7nBFhN22vFOS9ukTFTerbcjKuG/XTd7iY6F7xomCytM=\r\nx-amz-request-id: SBJDNASRVK2EB42E\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:52:40 GMT\r\netag: \"a660dd0441f12c1508a01e9d6fb031b6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 4i980wcjLJoyyC8wC2GZV9m9QQopYfgQ\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6713\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNVaI1vFlfsGVMaBIbZT7KhTKXckntdXVNp1yHtO7bmrIcWc7FuisRbuz%2BCOuFxCfGcgey1vF0Dz90JsWeJcYQwPoe6e4ksqMxmdv8SmvaPVKEZb1ughNFrlB2JuuQELj%2FFlIkFd%2FAEd6Mj9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d843ea50b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2160,"size_decoded":3110,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a660dd0441f12c1508a01e9d6fb031b6","sha1":"e8c9e706c53d93f428e1ccbc9b03215bbbb615d6","sha256":"7af4e2d2b12bd67001e64e389a835c9611145b42feeefd98ed4974d1aefb6f16","sha512":"692311b4a08e63ac8a8200774974777cb2f34d9c08a1e62f3fa7f6bb7bbdafe88b0abd81ac6087d68317968ea397e04e0a5bbae62d34f0b1b685598888bb07a0","ssdeep":"","tlshash":"2b411ac98a00f0a4f1d04abbd27845d181339f7696f62cace4d4f00dac0a2bb5a9d797","first_seen":"2024-09-19T19:38:42.356599Z","last_seen":"2026-08-10T18:38:37.707489Z","times_seen":332,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/robot.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.947Z","timestamp":1786387081947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/robot.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 27 May 2026 00:33:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 122539\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":122539,"size_decoded":122807,"mime_type":"image/png","magic":"PNG image data, 534 x 683, 8-bit colormap, non-interlaced","md5":"92f6bebd998cdcd64189703d7f74596e","sha1":"b6d73cbecdd20c59f9a1ba749ff2c7b1a37609d0","sha256":"d8ec07205248151f8d0876f4f1592acf2e0f3bc6df442623396e1e22b825e463","sha512":"d5fc37c23d6127c2736470a9db9cb970753e1e589f496966df1002b72eb325c6723c78d481f7dee5aa046d1ffa7136d2466a498a0953cc70e830d697285f48f9","ssdeep":"3072:+g+F91e7Bz5KQWKqMotsGk3n6c8nwEjK8/AvG/5MSYy6djjN:miXlWKQtsFn6lG8IvGahySj5","tlshash":"6ec31280d603a6aa0ead8be3711d07dd614d71a3db18a15ede0fcdd4938d6ab54cc20b","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-08-10T19:08:48.796Z","times_seen":253,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/webfonts/fa-solid-900.woff2","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.279Z","timestamp":1786387082279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/assets/css/all.min.css\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:01 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149908\r\ndate: Mon, 10 Aug 2026 18:38:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":149908,"size_decoded":150177,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 149908, version 771.256","md5":"44f8148f80e6c3d60fa6425b0cbb862a","sha1":"ec2f4e5f311462dce67b8f354e5bb9a68c12cf58","sha256":"e2c5cf547e2e8d74a17d05c5ad9f1f593ca526452e228124294fa983b908ff82","sha512":"07978f5827f0d5e9191b6970f0a01d10b88e33524c4aa3973d527ace295ee356f907c0374a430785eaabdd1ac06811c841b3da704066044f4d66fa4cc755ec8d","ssdeep":"3072:1q8xfiSXJLOvVpYQgUGUn9bymvMalSSb8S9glCb2XzMZm:A83ZLMVpYKrtPvQRSuzv","tlshash":"b9e312560a90854e7ad8c661360fef0fc28f33ea6ffff2a5e0c1fa8655dc94a2594450","first_seen":"2023-04-07T23:49:37Z","last_seen":"2026-08-10T19:03:35.110076Z","times_seen":3415,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/widgets/?id=%5B%7B%22id%22%3A2%2C%22options%22%3A%7B%22realtime%22%3A1%7D%7D%5D","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"104.20.24.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.697Z","timestamp":1786387082697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 07:21:27 GMT","end":"Mon, 26 Oct 2026 08:21:11 GMT"},"fingerprint":{"sha1":"07:05:30:82:57:E3:B8:BD:49:2F:74:83:02:E5:40:11:01:83:1A:33","sha256":"B5:84:A9:E6:B9:9B:98:0E:3D:7F:76:DE:8F:28:1F:81:BA:BD:75:92:81:CB:FA:9B:87:E2:50:EC:D3:5A:42:75"}}},"request":{"raw":"GET /widgets/widgets/?id=%5B%7B%22id%22%3A2%2C%22options%22%3A%7B%22realtime%22%3A1%7D%7D%5D HTTP/1.1\r\nHost: www.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nset-cookie: widgets_csrf_cookie_name=13d88a03569e5bd8fe779b7b62200a1c; expires=Mon, 10-Aug-2026 20:38:02 GMT; Max-Age=7200; path=/; domain=.cryptohopper.com; secure\r\ncontent-security-policy: default-src 'self' *.cryptohopper.com *.cryptohopper.tech *.candletrader.app *.hotjar.io *.hotjar.com; object-src 'self' *.cryptohopper.com *.cryptohopper.tech partners.liquid.com *.candletrader.app widget.changelly.com *.intercom.io *.intercomcdn.com *.posthog.com cdn.paddle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.tradingview.com *.candletrader.app *.cryptohopper.com *.cryptohopper.tech *.posthog.com eu-assets.i.posthog.com *.intercom.io *.intercomcdn.com ajax.googleapis.com cdnjs.cloudflare.com static.cloudflareinsights.com *.shopifycdn.com *.myshopify.com sortablejs.github.io cdn.paddle.com www.googletagmanager.com *.hotjar.com *.hotjar.io cdn.jsdelivr.net optimize.google.com partners.liquid.com widget.changelly.com s0.2mdn.net unpkg.com wchat.freshchat.com cryptohopper.webchat.freshchat.com cdn.plyr.io cointelegraph.com s3.tradingview.com connect.facebook.net d.adroll.mgr.consensu.org d.adroll.com s.adroll.com cdn4.mxpnl.com ssl.google-analytics.com bat.bing.com s3.amazonaws.com platform.twitter.com cdn.syndication.twimg.com cryptohopper.us17.list-manage.com ajax.cloudflare.com www.gstatic.com js.stripe.com www.google-analytics.com www.googleadservices.com www.youtube.com www.google.com googleads.g.doubleclick.net static.doubleclick.net cdn.segment.com fast.appcues.com www.googleanalytics.com www.googleoptimize.com assets.customer.io code.gist.build; connect-src 'self' www.tradingview.com *.candletrader.app *.posthog.com *.shopifycdn.com *.intercom.io *.cryptohopper.com *.cryptohopper.tech *.intercomcdn.com *.myshopify.com *.shopify.com *.cryptohopper.tech *.hotjar.com track-eu.customer.io *.api.gist.build *.cloud.gist.build ws: *.cryptohopper.com *.cryptohopper.tech stats.g.doubleclick.net cdn.paddle.com api.appcues.net fast.appcues.com api.segment.io *.google-analytics.com *.analytics.google.com widget.changelly.com api.cointelegraph.com wchat.freshchat.com *.hotjar.com *.hotjar.io saveload.tradingview.com cdn.plyr.io cdn4.mxpnl.com; img-src 'self' blob: data: *.cryptohopper.com *.cryptohopper.tech www.google.ie *.candletrader.app *.posthog.com *.coingecko.com *.intercomassets.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com cdn.paddle.com cdn.jsdelivr.net img.youtube.com *.giphy.com res.cloudinary.com appleid.apple.com sync.taboola.com widget.changelly.com assets.coingecko.com stats.g.doubleclick.net www.google.nl dsum-sec.casalemedia.com ups.analytics.yahoo.com pixel.advertising.com pixel.rubiconproject.com sync.outbrain.com image2.pubmatic.com ads.yahoo.com trc.taboola.com eb2.3lift.com x.bidswitch.net idsync.rlcdn.com pixel.tapad.com cm.g.doubleclick.net us-u.openx.net assetscdn-wchat.freshchat.com s.adroll.com d.adroll.com ib.adnxs.com cdn-images.mailchimp.com cdn4.mxpnl.com s3.tradingview.com bat.bing.com chart.googleapis.com pbs.twimg.com abs.twimg.com syndication.twitter.com q.stripe.com www.google.com googleads.g.doubleclick.net i.ytimg.com cdn.plyr.io *.google-analytics.com *.analytics.google.com www.facebook.com maxcdn.bootstrapcdn.com www.googletagmanager.com optimize.google.com track-eu.customer.io data:; style-src 'self' 'unsafe-inline' *.cryptohopper.com *.cryptohopper.tech *.candletrader.app *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com fast.appcues.com cdn.paddle.com unpkg.com cdnjs.cloudflare.com widget.changelly.com assetscdn-wchat.freshchat.com wchat.freshchat.com stats.g.doubleclick.net cdn-images.mailchimp.com s3.tradingview.com cdn.plyr.io fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com www.youtube.com optimize.google.com fonts.googleapis.com code.gist.build; font-src 'self' *.cryptohopper.com *.cryptohopper.tech *.candletrader.app *.hotjar.com *.shopifycdn.com *.intercom.io *.intercomcdn.com *.myshopify.com *.shopify.com cdn.paddle.com cdn-images.mailchimp.com widget.changelly.com s3.tradingview.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' static.cryptohopper.com *.candletrader.app *.intercom.io *.posthog.com *.intercom-sheets.com intercom-sheets.com *.intercomcdn.com *.tradingview-widget.com buy.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com create-checkout.paddle.com widget.changelly.com plugin.partners.liquid.com *.hotjar.com cryptohopper.webpush.freshchat.com wchat.freshchat.com js.stripe.com *.sumsub.com renderer.gist.build code.gist.build data: *.cryptohopper.com *.cryptohopper.tech coin360.com coins.gourl.io platform.twitter.com www.emjcd.com cj.dotomi.com www.facebook.com cdn4.mxpnl.com www.youtube.com www.tradingview.com discordapp.com s3.tradingview.com s.tradingview.com googleads.g.doubleclick.net www.google.com www.google.nl optimize.google.com; media-src 'self' blob: *.cryptohopper.com *.cryptohopper.tech *.candletrader.app res.cloudinary.com *.intercom.io *.intercomcdn.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com widget.changelly.com s3.tradingview.com cdn.plyr.io; child-src 'self' *.cryptohopper.com *.candletrader.app *.cryptohopper.tech *.intercom.io *.intercomcdn.com cdn.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com widget.changelly.com plugin.partners.liquid.com www.youtube.com; form-action *;\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Jbh2UO7qF31Vpdzj3O7SAkztYh4Z6SOGTkvZdAEBwvfzwcq_EZgWpQ==\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-ray: a2911d82dad956bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16477,"size_decoded":8646,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9f79fc09cffbf25edee6a823528105bc","sha1":"d785104e79e476a4fefd2abc0d184de721585278","sha256":"66bd617b8d0e0401c77d721079973f05795a4688eadfe5722a5e6d9d182e6f75","sha512":"00c6c84ebac80e8350b2361cbc437d955d663b939cb98623db960cec5d30ee5d6d2f3c75d03197e8d270091703f13d5ffad470e5daf08545cb3c7183e7dcb28d","ssdeep":"192:bxsyA+mFXJPFRE7bHr4KXs1Gyb+CsSulZEDjsIB9p4dWfC4kpuXrgkFfnZ6I9reh:bxsyAZ7gHPVdwL80Lc","tlshash":"5b72df6075b7d0a29073c5c094ba7b3d79a2b21def614863c7ed12bd47eceb83129491","first_seen":"2026-08-10T18:16:28.242948Z","last_seen":"2026-08-10T18:38:37.708797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.775Z","timestamp":1786387082775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d835a26569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":32879,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-10T20:36:23.2978Z","times_seen":66703,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/825/small/bnb-icon2_2x.png?1696501970","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.916Z","timestamp":1786387082916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png?1696501970 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: T+Z9lL+A93YGOBfohOQ1Uh1WaY2IzoEgLmT1J9ul3I5oP01u13N+vW2oH1ZSuCcg8uR3Ay0tUV8=\r\nx-amz-request-id: THRFY7NQ5BZBE3DS\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 03:02:57 GMT\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TsP.LwF_4OUWYcdi0NPwQyxuX2JVuts1\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6754\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWLdiGxXjM5hXxwmbaztJsvsAPvJ7A0zLtm45gOHnmQWfZ7K0VFOpxeqiv6mKp31jrt3eVst3p5WlFQjYLp3AaJ7dbsw5FDcELZeAusYfhEs5Z9mlp%2FfDLzlSM4SRLQ7aoTFAVXpny8bR7pj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d843ea60b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3237\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3237,"size_decoded":4183,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"39e39ca433ebda412a810fd724075584","sha1":"f308c2834b3d52be64a32d3fa7a4ac3ff50eaede","sha256":"c63ff571db9b48ac57b368f7d021314ed68f3bf8864504d1c144f0a4a084304f","sha512":"8851389ba624fde1654b240c7f1b37246eb763bec5bd5ebc9b055039357d49be73128d417439b8f799c8ab3b166a067a14edd9d7b3916bec7d768b3693e79bb0","ssdeep":"","tlshash":"24615dce36395969c562c1f09d9f5258fce7e619f416180edf39151abca0f8ce057322","first_seen":"2024-09-19T19:38:42.359092Z","last_seen":"2026-08-10T18:38:37.710123Z","times_seen":312,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/50882/small/hyperliquid.jpg?1729431300","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.935Z","timestamp":1786387082935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/50882/small/hyperliquid.jpg?1729431300 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: l+QtUc06nxNMiSM2tY10wu0tLl/eB6RuicPIDk53z03InxynSXvP95lZBCAwFJFMSOwhKY/11veEHM73GKpdBNnOXFM1xJcR\r\nx-amz-request-id: V2VF0CJSWPJFVAQK\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Sun, 20 Oct 2024 13:35:02 GMT\r\netag: \"c1b5445390b7149b49495211bd7c3969\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 788ZQS1gAq3yfP3WiyNSH74tyXjWXrYZ\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6713\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLMKHrvs9geMv%2F2do8REZLeFjlDDOOnH4tBlwTnrjnzKXbGalrsyoeg5dmnCW2u0FswK7%2FMIzhH87wbkKvjNujr09rHMO3HaZ%2BO4cdsqhiTfxdx7PhT6dk5IsDq%2BSmNOfzyrY9gnuWtDfKoK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d845eb00b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2005\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2005,"size_decoded":2976,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"c1b5445390b7149b49495211bd7c3969","sha1":"419f4718f5cd8e155e894e6b4886b4f9d9b3a772","sha256":"0451149a917679ad315c3db479cc1d187558799698c2340903b58958a02c92f1","sha512":"71e8692b7765e824e9e5bf863ca768e4734dbbb3506a8da4c7f8c8763c675c81a8547173eed29e5b51603ae513b9978345765e2d87bd739094e7cdb48f9d8645","ssdeep":"","tlshash":"4941093d333a2618dc61073509f35740fb3cbe1e66de9304428122eaa5650cbd574669","first_seen":"2024-12-22T02:31:25.204723Z","last_seen":"2026-08-10T18:38:37.710626Z","times_seen":261,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/69/small/monero_logo.png?1696501460","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.947Z","timestamp":1786387082947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/69/small/monero_logo.png?1696501460 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 5KX05GZL7iYWtBd5KqcXWAoKj5npopVlC4k4hcm6+PF/IAza1E1FvoLdJsxk6smpEg5v1P12NJBIwHmaId2h9B8+k73PwLtk\r\nx-amz-request-id: QPEM3EVMQVA6HMDZ\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 03:01:28 GMT\r\netag: \"659e8197e27656370d9a92cd43c60491\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9U7kkjLwg.jWwdPYD92guJMVarbQeWFS\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3408\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MwZmHrjOiTzcl%2FqCu4%2B8aV%2BKVT803Srhz2TZ0667xuHlBrOabvBCq4Dj9F0vxt39jmaLH%2BXhFd8nO8HKWYWmikHzZCgBgaVIzsnwA6DbatOL18PpFWIXY794%2BucWG9ajS03FFpGq5F52IdNg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d846eb70b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1795\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1795,"size_decoded":2769,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"659e8197e27656370d9a92cd43c60491","sha1":"586b24f0398db10eac326c9797eda0eaae1b89aa","sha256":"135c08a4496307bf0f0e6c6d8ef55a3695607321c919986e8df2ca8259aa6585","sha512":"e0e1f4533aee7ce72b18a3b394cc543789c7f6f3be9c4baf0867615e20ccebefadec4c080d67ecb063581e27686035e8843fa58fa4c2632792fce29ea35b5f14","ssdeep":"","tlshash":"9831c7d3f300d604825610134333f5dce87296eaee6626f8e5a5743cd5242d378a9a5c","first_seen":"2024-11-06T16:01:50.61922Z","last_seen":"2026-08-10T18:38:37.711208Z","times_seen":92,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/877/small/Chainlink_Logo_500.png?1760023405","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.982Z","timestamp":1786387082982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/877/small/Chainlink_Logo_500.png?1760023405 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 4M2Q4cCDSRE0CG//5WyFQAeLan4q7E1Qzf8BN1/gt9KC31zhgtRNq2dvrVw9unbCe3tipVZCgg8=\r\nx-amz-request-id: 0D5PCXJY53PB9G5V\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Thu, 09 Oct 2025 15:23:28 GMT\r\netag: \"7cb6ca8f7f2782723a29ced451b82b55\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VgbRETDpLbE8o44LGRHDFgHdz9wp7Ktb\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-bgj: h2pri,imgq:85\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=684\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kA3x6XABXTeoD05JDC9JDRue1LFCTIcPRJ3mlxKUOREfb4tviLcch9SDRSHYOfdbc0jrLe7aQPxbWc8BR2vn%2Fz4Szs%2B5OKCcZ5m1Xopee%2B8I3LTxwi0oqj41C0Rbm0GLZb8%2FpPpNsAlpK0np\"}]}\r\nage: 3408\r\ncf-ray: a2911d849ebe0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 637\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":637,"size_decoded":1641,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"3fba47b0e654a402f8057df615cbee26","sha1":"bc64c951b893bf9854f2245f80dfeb889606b45a","sha256":"e7c349378c3d5763292d915556c474f62cdfac5fad0891c2f689087dfd8bc4ce","sha512":"be0029a9b802223aea559585780660ad457cce6ee23d4d2f5c4e964641f335a8949e31b719aeb4a3733ed5b58b4b941ed8a091d8d59738c83f2fa6a2dde0dc0d","ssdeep":"","tlshash":"10f06241b9d8122ec8a50bb3970e60bc8ce636040d170a9cb08a801f3cc4b3a2bcbc92","first_seen":"2026-03-01T11:32:01.928635Z","last_seen":"2026-08-10T18:38:37.711779Z","times_seen":89,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.784Z","timestamp":1786387082784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a2911d836a2b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":681,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-10T20:36:23.309192Z","times_seen":93232,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/small/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.921Z","timestamp":1786387082921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/44/small/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: i8pRq9k/W00apxdDXkjwH3S79WteMmVgj27DJZ6LtOSMvlU3A5UdgyePMleJTyoMF/E4bDn3c2cSlu9Aog4RXe5wwvLOFROt\r\nx-amz-request-id: 0G1108R9KSPE5JH0\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"1ed36d280916ecfaa451eafeb7dc83e0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8UgagQYkV2t3o2PUNNubby2kMqMsKaaX\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJ5nse3xZgORNeP8NhstLh6Dhuu%2B0SG7IofRTf8hIXcmBZ2agnCI394zrRq%2FinF0cpLzA3JbW0QhTuHOng4XzvB0rPIX6soSyvFStPnIcXNWfBosxuy70SfKO5EuRgqivN7%2BWAYqUC%2BPKRFO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d843ea90b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1492,"size_decoded":2464,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1ed36d280916ecfaa451eafeb7dc83e0","sha1":"53e2ce224225fa28cecddea0f93a3fa1ce7779d0","sha256":"61a24e4420a9f37d5a0cba8d992198c555986ea046dd81f34d237d37c9353e08","sha512":"29596c765e3f5f5341caad39059df3b7df1d6e2eee73da2a5252505ceeb9673bc89e37079faa3ea895c1e8a8a8764ecaa5ddd46f8832a157c4723c099bd149de","ssdeep":"","tlshash":"2131c7fea3510691d7273a8c023b8511ee372ea341127c49f61bc42a306ffcc3a63545","first_seen":"2024-09-19T19:38:42.339425Z","last_seen":"2026-08-10T18:38:37.713014Z","times_seen":435,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1094/small/photo_2026-04-13_09-59-16.png?1776048311","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.927Z","timestamp":1786387082927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/1094/small/photo_2026-04-13_09-59-16.png?1776048311 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 51h0GS42VxaPMbnqrLZmK3U4D56zyF5bU4xzT138DmITgol9MtXt8uDz9yUGmZ87AgxMdDNPkr2hQdmnTToFy8ypLgpaUuD8\r\nx-amz-request-id: 0G18CV315X2ZXDWK\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Mon, 13 Apr 2026 02:45:15 GMT\r\netag: \"ab3490f6d3518cb542da5895305b207f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: l7BuceMjfdIO.xYwYbd4TBBk.9fcsoEq\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6734\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ecsUj7TvyK5JJt1MlJuuknEmcn9YdZxUEJN%2BIITiOQnYMQ7lppzhsz3cyU4YN5glvglmJzBIECW6X16fPz7T2zmQujjwRJdYOOEh0B3ejMLtDRhTqWPVK%2BHbeuHJHT%2BkpIfUPCa2bydClaZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d844eac0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2708,"size_decoded":3676,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"ab3490f6d3518cb542da5895305b207f","sha1":"7b32f033e7d1a0c49913e2dea3f2ac49ec424b96","sha256":"29f34d12c767a9dee85bcd4f8089f0ff20e6a6fccac6394c910afc7f8481ee7f","sha512":"8c639e254147a9cdf6ebf39cbdbde9181d92dbfa784f9ce2b7c19bb5357bf1393eee321e8cf72fcb15aaa8871a762ab35f1294f0f532bd347078b92544b50adc","ssdeep":"","tlshash":"7e512bfa14ae44e447326120699d1a6d64b39327ba7316488ba8fc60a0f04ac6089b6a","first_seen":"2026-04-14T05:39:50.062047Z","last_seen":"2026-08-10T18:38:37.713594Z","times_seen":128,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.702Z","timestamp":1786387083702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49829\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d89190c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23063,"size_decoded":5841,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-08-10T20:36:23.302049Z","times_seen":38835,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:05.025Z","timestamp":1786387085025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a79567aaa5/css/message-preview.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:05 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1405\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d916afe569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":94439,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-10T20:36:23.274025Z","times_seen":35843,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/icon/check.svg","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.955Z","timestamp":1786387081955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/icon/check.svg HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 374\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":786,"size_decoded":688,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c147b8c9e14ac7bffcce081046758ff","sha1":"81f375468374101a4cb039772aee7297c6704744","sha256":"b6687776abeaf423555dca32094dc7f4e8c10b2be4be985d1ada72ae117f6121","sha512":"51fb68c52d6195643634bfd295296366a170e2946e944261689b01b69bd221838b565f04ae4b71a7455fc292ccd38047af1d04489abd9fef321526a385151226","ssdeep":"","tlshash":"9a01201a239c453cba2a4ba0eb497574a9363262270dd4009334e9750ad809ebe3f5dc","first_seen":"2024-06-30T06:52:27Z","last_seen":"2026-08-10T18:38:37.715307Z","times_seen":317,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.760Z","timestamp":1786387083760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a79567aaa5/css/bubble-widget.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d897a7e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":94439,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-10T20:36:23.274025Z","times_seen":35843,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T18:38:01.300Z","timestamp":1786387081300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23; path=/; domain=.oroviento.pro; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":45007,"size_decoded":8572,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (379), with CRLF, LF line terminators","md5":"6e1151ff07fd497878a5ce2ac044662c","sha1":"86a1c33975972bfad8ff125e7ef00a12daa3e5f8","sha256":"eda46dfea1baf1f7ae3583394ad3d46ba76f32c1a5dfafa0df3eae30fd27603d","sha512":"92451999b17bdfa49536be49518d024368fe7db52441a51acc206cce4db37c2557821f68fc1f44e1753b32c3eb9ad9a594ebc44b98fac82e183861691b923ba7","ssdeep":"768:C62pp3NBuoviNCfbhdMT9/mkj7Z/JccZA8rMo422KJbaAW6ho:C62pp3jbkgs7Z/JM6ho","tlshash":"c613212064cd2d7b012362d2a121bfade59f8e31d63650daf2ff076a1be3d80ad17465","first_seen":"2026-08-10T18:16:28.245468Z","last_seen":"2026-08-10T18:38:37.715923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":59,"connect":28,"send":0,"wait":83,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.678Z","timestamp":1786387083678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88f9012efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":8710,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-10T20:36:23.265104Z","times_seen":49671,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/favicon.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.670Z","timestamp":1786387082670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/favicon.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Jul 2026 00:57:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9052\r\ndate: Mon, 10 Aug 2026 18:38:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9052,"size_decoded":9318,"mime_type":"image/png","magic":"PNG image data, 574 x 594, 8-bit/color RGBA, non-interlaced","md5":"c9395f148d0e6f40def6daf3f8d4ee4e","sha1":"4b902d62370f60d72655054cd26754f28d5ac7f7","sha256":"357386b36422dec73f19bcf53e85425781fbf6f867c26959bf95b887ff66d850","sha512":"59e69a42420c865e39d93bfbf8248e7bf04cf2bcd79e451a314f4e925068509edad72492968ae296685e0aff8eb0f4f1efde2d159f6e493545f8f38237002e8c","ssdeep":"192:x7GVpzEvmDtcRRIN/4qlXbOSwWkFlilidX4Kz:xyVNmwweO6kF88V","tlshash":"0b128ea1f81d213bed6811f89045dd57f61c5ac3e243c18c66b763a4af345c6abf91c8","first_seen":"2026-08-10T18:16:28.265279Z","last_seen":"2026-08-10T18:38:37.661334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/partner/light/2.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.942Z","timestamp":1786387081942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/partner/light/2.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3115\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3115,"size_decoded":3381,"mime_type":"image/png","magic":"PNG image data, 141 x 48, 8-bit/color RGBA, non-interlaced","md5":"08acf7383f4266bfa708f56ada826765","sha1":"bdca87210e9809030e7df8a17dd9f9070b60a682","sha256":"0a9daf562f285b997f78be80ddd92618c66d135b777256ab1823ee891108fa03","sha512":"a1786f15bb9cf4ce32489bd51d5020fcf333a7aa1d920329bf88b51048338ef6731f0d3815037156fa24c6ddd02d1aceacc2d23734eae427953e74038ef9579a","ssdeep":"","tlshash":"3f514cf78a3b4dfb98a79b3f15a08a51fa6a31643294b1fe3019673c44184bc675331e","first_seen":"2025-02-26T15:15:16.399757Z","last_seen":"2026-08-10T18:38:37.717946Z","times_seen":274,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/service/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.948Z","timestamp":1786387081948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/service/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1538\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1538,"size_decoded":1804,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e3fb24ee1841ba88adac2249e784064c","sha1":"ad3165e89de8366ab3bb17e5e2212f370affe961","sha256":"b4b4e8e9f36cb382d8bf1a5b38d163237922ef3fe70a58d44aa2807d741a8e78","sha512":"b820c70806596c7e071ced6f7e04d1cd966145bf7c72b612bd309d254537e9952eda55edc2fb630235827a1ccab9ebdf08a4d01eb892490909e7589df1f0a0ff","ssdeep":"","tlshash":"223107ea818f9ab3e68c022ab16c07906ada884e1048240c413efef8864312115c788f","first_seen":"2025-02-26T15:15:16.403553Z","last_seen":"2026-08-10T18:38:37.718613Z","times_seen":359,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/bg.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.220Z","timestamp":1786387082220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/bg.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 213346\r\ndate: Mon, 10 Aug 2026 18:38:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":213346,"size_decoded":213614,"mime_type":"image/png","magic":"PNG image data, 1440 x 756, 8-bit/color RGBA, non-interlaced","md5":"539d1f69fe9dd06cc247aad03b5ccc8f","sha1":"742b45af176687391522121dadb48bbd553e64a8","sha256":"760cf336831dc8bebe810ea2973efdf8d6ea23d1938b02f606a353f2dc136071","sha512":"15efa70a0bab3b0142fe83f9a2e2fc5345bb94256d89effc4e68263035b693a0962dc320d9e50ca8100211d6a2b187462ddcf9bcbcd0b870c90e119121018276","ssdeep":"3072:jgb2QqYFERQ+ChkZFAb7ukF2wmMGztd9kfRDbEyhwAMPS3qO5EeEcBprk2icT60q:m2Q7zgFAXgwmMGp4KSaGEczrk4Ge1Rwd","tlshash":"112412c549f0e6487d1f1674af9ebf3be323a92f44e60e69f271e9adc022c918659005","first_seen":"2024-08-19T18:45:28.791946Z","last_seen":"2026-08-10T18:38:37.720235Z","times_seen":309,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a5eeda0642ea11d490f1619/1ju1d0fki","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.281Z","timestamp":1786387082281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /6a5eeda0642ea11d490f1619/1ju1d0fki HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a79567aaa5\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d8059f3569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":1224,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"7ad3b4bf30fe8e35f325119a811d4312","sha1":"0f15ac5f757209114d01e7eabcca671ddf8742ed","sha256":"32770a48561679d8929a7c7675014fd6fe3598c60d7edc047220ca82f37f8e45","sha512":"2be3dddc5f36937c6af5a415e90e70c2181b3de82671204774b2937574e5c68b0961ad260a36bd611d12feb684c4f2e5a900c6717680d5d243a7b227a6f688e4","ssdeep":"","tlshash":"6e4136d65b4f6856639410d96cfefd1f38b733da45d858e2570c000172e5bad2a8dd34","first_seen":"2026-08-10T18:16:28.237749Z","last_seen":"2026-08-10T18:38:37.72105Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.641Z","timestamp":1786387083641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"3023bfbb525208f74b7ea3565aef284c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88b8f32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107048,"size_decoded":27524,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3023bfbb525208f74b7ea3565aef284c","sha1":"40989f88c7a170c366bcdaad6b53750a3ab4535e","sha256":"3790802fa08d870ade304961390c13b99534b1479f0e8be7c1e592bea881b4d7","sha512":"96d55e21bfc0442d5fd06156654b80adce67b068fca9f96364ad31029a13f145f2ed19b71f4b6fe309174c6e13d26bb8ea4c134aedd4cad997e2230e9ff1a993","ssdeep":"1536:BigMTWFu196woffn32j8DegaOebWbaGlDluK1k+Y+dZPkx3u4V5pfYMrlSf:4nmuTcgGzb4x3u4V5pPrlSf","tlshash":"bea3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-08-10T04:46:44.663491Z","last_seen":"2026-08-10T20:36:23.301229Z","times_seen":105,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/css/aos.css","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.711Z","timestamp":1786387081711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/css/aos.css HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 17:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26053,"size_decoded":1849,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-10T20:58:30.533652Z","times_seen":43476,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/6319/small/USDC.png?1769615602","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.919Z","timestamp":1786387082919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/6319/small/USDC.png?1769615602 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: uo1GXiDDqimmd3WPmz7M44x8ACbmd51RBJiuucU/TVJFuFbBMPrnvryx16Nyjh+h+sCZd/24fdo=\r\nx-amz-request-id: THRASAC448242A1C\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 28 Jan 2026 15:53:26 GMT\r\netag: \"b2ca3e61e62934ad3a38984945a40573\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: f66HnXlXdzNOpaD6ZRgWYQQLeqBXOTbi\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FXirVMijejmG44v2O8IXIqhiICE%2BdKuJZkwFUSuuyVz0Q5KMMekkJZM60xSkmTUxWSU4Jlfggtvs6pmWwMwZYcTDaB2yJnzeLnhzxKTZKoYbogjh%2F9PCP8pKxuI1axc1AGwc5OAcokeP%2Fks\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d843ea80b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4060,"size_decoded":5010,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"b2ca3e61e62934ad3a38984945a40573","sha1":"36565a524c479d4cf3a721a106639bc2cfec05d9","sha256":"9e48398754f05daeaeddcfa8e002b53a12ad6cc2a99c3cb7916509356bb0febf","sha512":"6fe335461eb8f3eea0896473b4460247cb82a8fc0212fa1c17b11582bcd62f5959c5c34c8dd9caa87c4bbd2aebd06bb7c7ea6f3433efe90c672f7b8d0ee38ee8","ssdeep":"","tlshash":"ec817ec633c2c9ed47218366103539d8da7f83015fb698f8756e4d79907a62a5701e13","first_seen":"2026-01-29T04:56:09.356611Z","last_seen":"2026-08-10T18:38:37.723905Z","times_seen":144,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/toastr.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.735Z","timestamp":1786387081735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2353\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12635,"size_decoded":2591,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dbf1260fde6ac3c7d16e4368b2af093e","sha1":"310a3630720dc88eb192da726cdf9fdb540a0803","sha256":"baefedb200a67117ed40391d7502f2bb5edee9de5d775a9bfce518e3cc749bff","sha512":"e0dff23ecabca3071a3b99c4c7ceb95419fdfed7cc3ae73c34de4044468a1f225a7fcbfb8ca7fefc58ba5900f57dcfe77d9993782498668ea39dec227ec24830","ssdeep":"96:ROtzIADXVID/LMpDRAD7tTQufnX5NqgWtdQK69q8OOGOlMixHCh6AYwDjOot:RgTKMAVQuPpNqgoWjrpG9ACRYwDjOot","tlshash":"6d42a6452912a3618dfb73ac9a87900cfb76a323858956167d7c83d8af30614d2f2fdc","first_seen":"2023-10-18T19:09:36Z","last_seen":"2026-08-10T18:38:37.724609Z","times_seen":293,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/4.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.966Z","timestamp":1786387081966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/4.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3052\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3052,"size_decoded":3318,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"85405a421f87dd9f981313667ce212e7","sha1":"38c009f917f46281ca7c21cadf4d8d28eaa5f51a","sha256":"db6f1c435c32df8a106ac1ef7ec630d3afced5ee04fb713a20f501903db7e3e3","sha512":"158534c7d5f539a31d4ef51c47d18595cd99ee801ea4dbdc19cf9bde71218b91a9667ed25a47dd1e1060350679521e4a1573c04c5bc6912a669ac99384f17239","ssdeep":"","tlshash":"98515dc9ef3adc3a020d514bd39dd570ed3a0e8f9d48f26972f410105c46e08e52d269","first_seen":"2025-02-26T15:15:16.421849Z","last_seen":"2026-08-10T18:38:37.725257Z","times_seen":305,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.881Z","timestamp":1786387082881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://oroviento.pro/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 175\r\nOrigin: https://oroviento.pro\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"{\"p\":\"6a5eeda0642ea11d490f1619\",\"w\":\"1ju1d0fki\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://oroviento.pro/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"BH2NywrzE5bdTvVL6UAxd\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-pkpv\r\naccess-control-allow-origin: https://oroviento.pro\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a2911d85ba4d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1041,"size_decoded":1417,"mime_type":"application/json","magic":"JSON text data","md5":"ec5b96d3d4b5cd504374cd9c0298ecdd","sha1":"e68fb9d78163e6a40a0266e0ee021add5a8819fe","sha256":"b4cbe1b39ab8b21edabd7e781e7a7198796fe59bb244b0300231dda029966a1e","sha512":"19c6618b4c370b3ac98d2ae69c92821802fc0494643182d4a13fe6200454bb2c70e53dbd887f0da843a5cf696e67121d668daf06a20ca8a4ac9a73fdd6a32eb8","ssdeep":"","tlshash":"7b11a5062f0c0d117aa7ba812be56c18f9cca9c630e48469c5e4dc9c34b837a51c2119","first_seen":"2026-08-10T18:38:37.725922Z","last_seen":"2026-08-10T18:38:37.725922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.893Z","timestamp":1786387082893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Aug 2026 10:06:54 GMT\r\nexpires: Mon, 09 Aug 2027 10:06:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117068\r\nlast-modified: Wed, 18 Feb 2026 19:51:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21884,"size_decoded":22697,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21884, version 1.0","md5":"4279528ce0e7dc28919e6f8ce5f0eaa5","sha1":"a0bec563643727d81bf21d0acec08227d9269da4","sha256":"425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371","sha512":"2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507","ssdeep":"384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87","tlshash":"0aa2e187b3eaa46d5787b931fa0a1900b8fe73f65d27da6484e087c9a1456c48c3dd3c","first_seen":"2026-02-19T22:29:10.595811Z","last_seen":"2026-08-10T20:11:55.211846Z","times_seen":26702,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:03.644Z","timestamp":1786387083644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"b1a31e23b866b6088c56d92b48c2e02f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 49939\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d88c8f52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":2632,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"b1a31e23b866b6088c56d92b48c2e02f","sha1":"6fa34728fbe3987e3c07012e1eae4eda180aea9c","sha256":"9f9c127cad1c2e43687cdaea9fe8c1c4aa6b97029f4fe6b888362d7b4b6f75d4","sha512":"9b86aee6be4aae315b4496e6eb12ac2b5995a55e9c6b963d23e2a1303b2a094112e4c8621f6d016d2018c6e0296c922d22c532a1c4cc7645345767efb04f6123","ssdeep":"96:zNol9Hqt7pEma7hY/rcuJBPDRIv6hJQ7i16b3n4vkjvxQcsD:zq3HhNYxLRIvgxu3nVY","tlshash":"fbb1859af247b45ac156225150ef3b29f33a281ca61ccdc4b66565f218784cba077f39","first_seen":"2026-08-10T04:46:44.585779Z","last_seen":"2026-08-10T20:36:23.314816Z","times_seen":106,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/aos.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.734Z","timestamp":1786387081734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/aos.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4194\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14239,"size_decoded":4432,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-10T21:02:46.079676Z","times_seen":22645,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/partner/light/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.941Z","timestamp":1786387081941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/partner/light/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2041\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2041,"size_decoded":2307,"mime_type":"image/png","magic":"PNG image data, 135 x 48, 8-bit/color RGBA, non-interlaced","md5":"7ed93d7114b38a649d2e64c2d5afc379","sha1":"739ba2fef719237b853713dafc1911f5d0ff1412","sha256":"6dc5b8a9958467f57667d85d09b098de533a0fab7cea033b857f4acd12a2f009","sha512":"be30a9a783a0d7aeadf7c461a43a630ede001e5849ddd88c0f7434cd278567328f25cf0fa7fc796b1c46328da8f072409f8d126d4c8542e2161ee8f503729c42","ssdeep":"","tlshash":"7a416e86d447f297cb64011841b85b612ff603fd213583c7303131e56b3b0ae68e59e3","first_seen":"2024-08-19T14:01:31.576563Z","last_seen":"2026-08-10T18:38:37.730489Z","times_seen":311,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/banner/home1/4.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.940Z","timestamp":1786387081940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/banner/home1/4.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1594\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1594,"size_decoded":1860,"mime_type":"image/png","magic":"PNG image data, 43 x 30, 8-bit/color RGBA, non-interlaced","md5":"a9985c55d9f4ce1b2201df62e3a882b1","sha1":"0b3cd40b1ad0797c67b27b5f256970c23910ef5a","sha256":"f2975e37b06e4b00120ac8248ed63919dd39dda368646585ce12609b21687f87","sha512":"25ec2946af83840094dd1436c3a91292f969e16c992b3e9631486d606fcc5e444252961f6fe23b861c428c8f315b79ed7d03b131095a738176857b1b893ce9e8","ssdeep":"","tlshash":"fa31087d4b0e0999c82cc4d06c590444ea7b3ac25388ecc87e352ad537a5be0ce9e823","first_seen":"2024-06-17T17:48:48Z","last_seen":"2026-08-10T18:38:37.73126Z","times_seen":385,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/partner/light/4.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.944Z","timestamp":1786387081944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/partner/light/4.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2061\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2061,"size_decoded":2327,"mime_type":"image/png","magic":"PNG image data, 164 x 48, 8-bit/color RGBA, non-interlaced","md5":"5ed67283685a647d44ba73b0291d06fb","sha1":"26a4f4c29ced0c602f0ad35d87ca3356ea1b8034","sha256":"55b9c44a1bacdff707d6c1a2dc4ab8fa8c15f4136bf39c556b75e30d94ed70af","sha512":"ce9093e577e6b4c1661e2958dc6ac8bd947c19b374b673795bd2ef417226d433db961e708d42ad5a06dd892f33d8bc4b2f469b42b68b848fdffc7d1d9aec9354","ssdeep":"","tlshash":"95412a8bc89a2658bde5645c0bba2f349d33090dd2533939bab68d2c705b4d4a361b1b","first_seen":"2025-02-26T15:15:16.401664Z","last_seen":"2026-08-10T18:38:37.732038Z","times_seen":277,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/webfonts/fa-brands-400.woff2","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.597Z","timestamp":1786387082597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/assets/css/all.min.css\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:01 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108000\r\ndate: Mon, 10 Aug 2026 18:38:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":108000,"size_decoded":108269,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 108000, version 771.256","md5":"83a42241ada98e0f959353ca0c3ee027","sha1":"f1234dff4095688c945513d40751012b70462c03","sha256":"f461742308b7791fee6e9698e1212aa6e8fd1d5e5b41795bfd68e93aa011073d","sha512":"ee0e9c9ebe49a00924f01c5d992f6d987cf5e579e7d593dbededb31b20eb16beb5c583229d476b38cd431c8bddbfe11e8bc62944caad890048e5685d479e9516","ssdeep":"3072:n1gbLdJ3FD1tq/bSfzUA8KdmDy2aoQDPx:0hFD1tq/bSryKdmTaosPx","tlshash":"5eb31208cc5d6bbfc84e468438c057a93c727e78a17272f318ffd5a454af3aba981845","first_seen":"2023-04-14T21:22:23Z","last_seen":"2026-08-10T19:02:42.051755Z","times_seen":1878,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a79567aaa5/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.776Z","timestamp":1786387082776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a79567aaa5/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oroviento.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:42:11 GMT\r\netag: W/\"2fecc9d90ae6ad7f85d676e274e5d4a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1404\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2911d835a27569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":348923,"size_decoded":117195,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-10T20:36:23.305124Z","times_seen":9918,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.883Z","timestamp":1786387082883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://oroviento.pro/\r\nOrigin: https://oroviento.pro\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-3r0p\r\naccess-control-allow-origin: https://oroviento.pro\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 18:38:03 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: a2911d840a34569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":711,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/18834/small/wstETH.png?1696518295","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.945Z","timestamp":1786387082945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/18834/small/wstETH.png?1696518295 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: G/1W1/YsKdnV9E2dempnsVdmRsNxrHp1qFLfjaM8L5XqI0AUfJ/hHajACJ61Ma4giJ/IfNgt41o=\r\nx-amz-request-id: YDYNPDH68BNA3GX4\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:38:42 GMT\r\netag: \"0aec842a4de31085e66e787401108d3a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9HcD49WNR0kd9Uwe8hhIiAw11.FuyV_\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 1404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFPk7OPnA0MrZvExlAYEYgMP%2BnrDQ%2FE9fVbJObHV77cB%2BXLTOdAvM%2BwAMS4g03zJq0zj5UUbdW0ip2%2FLxaQ3md%2BX1899NBV4yyUzuRAhPdc%2F4PLN%2BxyHOA4iWsnvgeHtiPsHjMltSIV47Ck6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d846eb60b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1628,"size_decoded":2588,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"0aec842a4de31085e66e787401108d3a","sha1":"c0c9a0e98186b648e6626c2357c7160c42f1456c","sha256":"058fa745e2245d1a728ded6f9aff4aca38837bcd07685436a03a3e9d7fc0e8e5","sha512":"99d38b889941f8f204956d65102fc3ba188446eaaa1cfafca34c9758eda9e853a4e870af5347d0b2f83f06c8a9d0509b4b08d37de9372ffbe09e0703b180e76d","ssdeep":"","tlshash":"d031c6c5d0524a3a83a08158334f597eefb223cd41266b1e21d9f96a1d83a941599ab8","first_seen":"2024-12-22T02:31:25.196617Z","last_seen":"2026-08-10T18:38:37.734377Z","times_seen":363,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/30061/small/wbeth-icon.png?1696528983","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:02.980Z","timestamp":1786387082980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/30061/small/wbeth-icon.png?1696528983 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: kBojsjdaLQyoZ3UqYnGSaQZUg6lmdKFgBvBfgCi8XNhOWaH4H18oO5qcJzSLhin5yeE6JB74cnaRLo7NquKMMoPI9t+7Nd5g\r\nx-amz-request-id: X72CGXYKSJ2EKE8Y\r\ndate: Mon, 10 Aug 2026 18:38:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:50:19 GMT\r\netag: \"aa30db6a8fcd7bf4ecf8c688a7ede873\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZPPFRi.SULfnakR4gQsbgs8PNpsCTyVh\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 1404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHWw2XRFkUd5V2pLtdwWqFzXDklo12PT705uQoRrqwmpqu%2FTotugzdn6UojlzE5MonbhD%2BqYgtbVC4IZnVBc2yKujZLQLIPWEX4PWFxidD819bshM0xdeWBou0Sul1UC7bAQNr%2FqdbsYgEzL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2911d849ebd0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4357,"size_decoded":5327,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"aa30db6a8fcd7bf4ecf8c688a7ede873","sha1":"35bbba65543dcb9e5478e8746a1131e4fadfc80c","sha256":"b1b0aae3c5ced1da38cdbc836498f232867ea2003515a04db8db9060b8743362","sha512":"534513eb862da00c054f3a2fe5524d595f47d9ee7ea9f31360a4c4135c8ec9f0900dcbcf76ce16b43bdf964ff56c54fbac5eedff192e4a1b0a795c7c764b834b","ssdeep":"96:ZSg5RdAUlSm/8ipClDVI2rLZs3pfe8D0esiLt2uHcd:ZSedA8n8ipClDVIGFyfe8D7VLtZcd","tlshash":"b3918db4f3f899a1800412beb0f522a2f59d82edd872284dc21798b63531fc4ab72658","first_seen":"2025-08-05T21:46:09.206118Z","last_seen":"2026-08-10T18:38:37.735121Z","times_seen":322,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/js/purecounter_vanilla.js","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.738Z","timestamp":1786387081738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/js/purecounter_vanilla.js HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 17:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2226\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5409,"size_decoded":2464,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5156)","md5":"a337c9af93cd71a7a9517921879be5ec","sha1":"077f79d84527d7c449112df06d047565553c6594","sha256":"6b68e5ade742f1c41e98d4a7052dcfa69de8a5961c32144adee15091099060ff","sha512":"33ba2d92270980d9fbf7cb99a2f18b3b1f1b9d3f11c37211c34590d9dfcdce87105d1807bef2930aff45b46dfe9ace5183d6fbfe4712c2a4de5ac5654b4c1241","ssdeep":"96:iRrPh640rGYBDCp3oPgonzvMkdJz7zxCrO6U006NEukUHCcx/puPsO5OworU:iRzMfFxCp4PgcMIxC46iPUiy/puPsO0S","tlshash":"5cb1b6897283f0b6c77750a600ef5207b678a561141ec550c16af8d43dbe6bbc313f6a","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-08-10T18:38:37.735947Z","times_seen":817,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/icon/1.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.956Z","timestamp":1786387081956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/icon/1.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8116\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8116,"size_decoded":8382,"mime_type":"image/png","magic":"PNG image data, 106 x 106, 8-bit/color RGBA, non-interlaced","md5":"875a46e4f2d69d1296cf5719f0f64e92","sha1":"635b930ce8720be83fc58f0e085b7411dbf8bacb","sha256":"c46b0e8e724314a80586cc67b0d5847106eb36d9b47f36e5bc06ceffc2046dda","sha512":"418e489fd9b644ab07b08dcbd9db81b744d360a27985de80fb8e6fb74304f54955f3881a989a057f55cd8c34e71d746f025f48b9f26a1bc2a9a95268f446a352","ssdeep":"192:rS7PD57QCblNMLorw2m702humQSMLHKsXEy/p8F5jDJ:e7PD5cCbXJzm7TuASHBXEy/w","tlshash":"2af1af83f228e5b25472c166315de95c383d22ba060de79bbceea4b4c51c5da0615b60","first_seen":"2024-06-17T17:48:48Z","last_seen":"2026-08-10T18:38:37.736647Z","times_seen":380,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/feature/home3/6.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.969Z","timestamp":1786387081969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/feature/home3/6.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3565\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3565,"size_decoded":3831,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"434facf1f64f3112e71064255e9a9333","sha1":"043b6ca41aef31a2c3de1b04b9d385b798512827","sha256":"5f3bae46fc6a57f0f5d246d21f59fb12927c315c9f84d3cafe30d0bfc18b60f4","sha512":"836ee40b802a593d6210dc15c2c0905cc4591097b3c87242d908f2020bdc53745bb5e2fa7c9d68972ab12e14182cb06278f90a006af7f050e2c7480185379ee3","ssdeep":"","tlshash":"fd715cba67d9353ca658f3a31f784250f4bb60abea35244d2a6e07f183184c15b0fb15","first_seen":"2025-02-26T15:15:16.425846Z","last_seen":"2026-08-10T18:38:37.737401Z","times_seen":306,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oroviento.pro/assets/images/logo/logo-dark.png","fqdn":"oroviento.pro","domain":"oroviento.pro","tld":"pro"},"ip":{"addr":"77.90.2.3","port":443,"asn":48314,"as":"IP-Projects GmbH \u0026 Co. KG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oroviento.pro/","date":"2026-08-10T18:38:01.973Z","timestamp":1786387081973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oroviento.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 01:17:45 GMT","end":"Fri, 23 Oct 2026 01:17:44 GMT"},"fingerprint":{"sha1":"AF:62:88:ED:50:73:B6:B3:94:00:D9:56:84:00:5C:D6:BE:06:BC:DF","sha256":"E0:F7:5C:E2:59:0E:DF:2E:5C:CA:47:E1:4C:2C:DE:7B:6A:5F:D2:4A:29:9D:DC:D4:67:DD:5F:2B:0F:24:33:FA"}}},"request":{"raw":"GET /assets/images/logo/logo-dark.png HTTP/1.1\r\nHost: oroviento.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oroviento.pro/\r\nCookie: PHPSESSID=5bc7d592057a2e20853cbf9342e0db23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 18:38:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Jul 2026 23:25:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75824\r\ndate: Mon, 10 Aug 2026 18:38:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":75824,"size_decoded":76091,"mime_type":"image/png","magic":"PNG image data, 3250 x 1965, 8-bit/color RGBA, non-interlaced","md5":"fe191f959a8f5ad82c29740cac043f7a","sha1":"eebc346b7d8f602b9dee3b1fa49a84fe128e9401","sha256":"f72b215441427e8b94e968064df059aaa10b8d79fa4971d1d5f9e8704949f838","sha512":"a762d914a4cd6724b5018d656de542cd61d31cd57d8405036f473213a593deefbf3e9388d1ef4873b09109e53f2e22dec8b12a2927125bdab81cbfee1a0671fb","ssdeep":"1536:rjsBxNfG97hHHgOmUv8qq3ELsxUmAEA2VJjCBit5K:nsxfghHHgOmUkqq3LxUmHDjCBit5K","tlshash":"ec73f190e77acc40ce39b5795a3bbfc9affae484314580f56b76229e61034bc1985331","first_seen":"2026-08-10T18:16:28.363112Z","last_seen":"2026-08-10T18:38:37.738191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"oroviento.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}
